[dm_tor] [bm_tor] Tor lists incorrect
All three tor files that you have:
I have included the TOR network in these lists (bm_tor, dm_tor, et_tor). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
The dm_tor and bm_tor lists are including ip addresses that are not in the tor network. Traffic from the tor network only originates from exit nodes.
To correct this for dm_tor you need to use https://www.dan.me.uk/torlist/?exit as the source instead of just https://www.dan.me.uk/torlist/ (See https://www.dan.me.uk/tornodes for information about it)
To correct this for bm_tor you need to use https://torstatus.blutmagie.de/ip_list_exit.php/Tor_ip_list_EXIT.csv as the source
Note et_tor identifies exit vs non-exit so it is correct. The rules specifically include the message "ET TOR Known Tor Relay/Router (Not Exit)" to identify non-exit relays, so it would not need to be changed.
Note: the service for bm_tor doesn't exist anymore. This is a duplicate of #55, a PR which solves it is here: https://github.com/firehol/firehol/pull/461