blocklist-ipsets icon indicating copy to clipboard operation
blocklist-ipsets copied to clipboard

[dm_tor] [bm_tor] Tor lists incorrect

Open wilwade opened this issue 6 years ago • 1 comments

All three tor files that you have:

I have included the TOR network in these lists (bm_tor, dm_tor, et_tor). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).

The dm_tor and bm_tor lists are including ip addresses that are not in the tor network. Traffic from the tor network only originates from exit nodes.

To correct this for dm_tor you need to use https://www.dan.me.uk/torlist/?exit as the source instead of just https://www.dan.me.uk/torlist/ (See https://www.dan.me.uk/tornodes for information about it)

To correct this for bm_tor you need to use https://torstatus.blutmagie.de/ip_list_exit.php/Tor_ip_list_EXIT.csv as the source

Note et_tor identifies exit vs non-exit so it is correct. The rules specifically include the message "ET TOR Known Tor Relay/Router (Not Exit)" to identify non-exit relays, so it would not need to be changed.

wilwade avatar Mar 10 '19 13:03 wilwade

Note: the service for bm_tor doesn't exist anymore. This is a duplicate of #55, a PR which solves it is here: https://github.com/firehol/firehol/pull/461

dev-zero avatar Jun 28 '21 07:06 dev-zero