On Sat, Jun 6, 2015 at 7:04 AM, Jarry <[email protected]> wrote: > Hi Gentoo-users, > > my web-server gets constantly abused by users which appear to be > using tor-network (ip-lookup of source addresses always points > to tor-exit.watever). How can I block this tor-traffic completely? > > I know I can get the list of tor exit-nodes on: > check.torproject.org/exit-addresses > > How can I feed this list to iptables? Is there some ready-to-use > solution, or do I have to parse this list through some script > I have to write first? >
However you do it, please don't use whatever approach half the websites seem to be using, which ends up blocking relay nodes as well as exit nodes. I run a relay-only node and it seems like random websites block me all the time. So, I just route all my non-server traffic through an anonymous vpn, which works fine, though likely being the source of just as much abuse (by others). There seem to be ip reputation services out there which don't distinguish between tor exits and relay nodes. Every once in a while I force a new dhcp lease on the IP used by tor, and I'm sure some other random user on my ISP then wonders why half the internet no longer works. The website you listed does appear to list only exit nodes - my node doesn't appear on the list. -- Rich
