Re: [gentoo-user] How can I block incomming tor-traffic?

[Jonathan Moseley]

You have to configure it to block all tor proxies. I don't own any servers
but that seems like the most logical thing to do.

On Sat, Jun 6, 2015, 09:12 Stroller <stroller@××××××××××××××××××.uk> wrote:

>
> On Sat, 6 June 2015, at 12:04 pm, Jarry <mr.jarry@×××××.com> wrote:
> >
> > …  (ip-lookup of source addresses always points
> > to tor-exit.watever). How can I block this tor-traffic completely?
> >
> > How can I feed this list to iptables? Is there some ready-to-use
> > solution, or do I have to parse this list through some script
> > I have to write first?
>
> I would have thought you could just have the webserver deny access to the
> tor-exit.watever domain.
>
> For Apache, ctrl-f "domain" on this page:
> http://httpd.apache.org/docs/2.2/howto/access.html
>
> NB: if you google "how to block tor", DNS based denial seems to be the
> recommended solution:
>
>    https://www.torproject.org/docs/faq-abuse.html.en#Bans
>    https://www.torproject.org/projects/tordnsel.html.en
>
> If you wanted to run a daily "add to iptables script" then you could
> extract those IPs with:
>
>    curl https://check.torproject.org/exit-addresses | grep ExitAddress |
> cut -d ' ' -f 2
>
> This is a bit primitive, but you can see it works.
>
> Stroller.
>
>
>