Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a website written in ASP.NET MVC (and that means, it runs on windows server), that i want to protect from tor users. I thought about setting up some rules on windows firewall to block tor incoming connections, or something like that. Does anyone have any advices maybe? I would be very grateful.

share|improve this question
    
... "Protect" ? –  Ignacio Vazquez-Abrams Dec 4 '12 at 16:23
    
Yes. Protect. When someone from darknet hacks your website, there is no way you will track them. Thats why i need to disable it. –  ojek Dec 4 '12 at 16:26
5  
You're probably better off hardening your application rather than trying to block all avenues of attack. Tracking down a hacker very rarely does any good anyway, since they're usually behind some other form of anonymizer anyway. Or, even if you did find them they're often in countries that won't help you out. –  Kyle Dec 4 '12 at 17:06
2  
Don't do this without a very good reason. "I'm afraid of being hacked" isn't a good reason. There are a large number of legitimate uses for Tor, and besides, you can't easily track down somebody who isn't using it when they break into your site, if they have half a clue. You lose visitors, and gain nothing, by blocking Tor. –  Michael Hampton Dec 4 '12 at 18:12
1  
Others saying this is a bad idea are right. However, often the person doing the implementing is not the person who made that decision. –  Joel Coel Dec 4 '12 at 18:21

1 Answer 1

up vote 4 down vote accepted

You can get a list of TOR exit nodes from https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=your.ip.add.ress where your.ip.add.ress is the IP address address of your server.

# This is a list of all Tor exit nodes that can contact your.ip.addr.ess on Port 80 #
# You can update this list by visiting https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=my.ip.addr.ess #
# This file was generated on Tue Dec  4 16:45:26 2012 UTC #
103.4.16.118
105.237.3.134  
.
.
.
98.250.89.34
99.194.201.167

You should be able to convert that into something that you can use to block TOR.

share|improve this answer
    
Neato. How frequently does that change? –  ceejayoz Dec 4 '12 at 17:38
1  
@ceejayoz It can change very frequently, as exit nodes enter and leave the network. –  Michael Hampton Dec 4 '12 at 18:10
    
Is there any way to translate this list of IPs into actual firewall rules easily? I'd rather NOT have to go through this by hand and add firewall rules for each and every IP. –  Thomas W. Dec 2 '13 at 17:59
    
@ThomasW.: It would be fairly easy to do that. –  Iain Dec 2 '13 at 21:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.