My full node seems to be rejecting tor connections I'm running my full node with bitcoin core v0.18.1 with a mostly default configuration on debian 9.11. Port 8333 is forwarded through my router and I have 20+ node connections, so can safely assume others are able to connect, at least through ipv4. A friend was testing his tor node however, and received the following error when attempting to connect to my bitcoind's tor hidden service address: Socks5() connect to XXXXXX.onion:8333 failed: connection refused

When I run bitcoin-cli getpeerinfo I can see *.onion addresses in the list, so I presume others are able to connect through tor, is that correct? I'm using UFW and have 8333 open from all addresses, although tor connections are through localhost so UFW rules shouldn't matter. Why does my node reject the connection to my friend's node? 

Here's my bitcoin.conf:

bind=0.0.0.0
onlynet=ipv4
txindex=1
listen=1
maxconnections=256
dbcache=400
upnp=0
discover=1
Turns out my node had auto-banned localhost (127.0.0.1) at some point. As a result bitcoind was rejecting all incoming connections from the tor service, including my friend's attempts. I removed the ban and he is able to connect.