I have a website written in ASP.NET MVC (and that means, it runs on windows server), that i want to protect from tor users. I thought about setting up some rules on windows firewall to block tor incoming connections, or something like that. Does anyone have any advices maybe? I would be very grateful.

  • ... "Protect" ? – Ignacio Vazquez-Abrams Dec 4 '12 at 16:23
  • Yes. Protect. When someone from darknet hacks your website, there is no way you will track them. Thats why i need to disable it. – ojek Dec 4 '12 at 16:26
  • 5
    You're probably better off hardening your application rather than trying to block all avenues of attack. Tracking down a hacker very rarely does any good anyway, since they're usually behind some other form of anonymizer anyway. Or, even if you did find them they're often in countries that won't help you out. – Kyle Dec 4 '12 at 17:06
  • 2
    Don't do this without a very good reason. "I'm afraid of being hacked" isn't a good reason. There are a large number of legitimate uses for Tor, and besides, you can't easily track down somebody who isn't using it when they break into your site, if they have half a clue. You lose visitors, and gain nothing, by blocking Tor. – Michael Hampton Dec 4 '12 at 18:12
  • 1
    Others saying this is a bad idea are right. However, often the person doing the implementing is not the person who made that decision. – Joel Coel Dec 4 '12 at 18:21

You can get a list of TOR exit nodes from https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=your.ip.add.ress where your.ip.add.ress is the IP address address of your server.

# This is a list of all Tor exit nodes that can contact your.ip.addr.ess on Port 80 #
# You can update this list by visiting https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=my.ip.addr.ess #
# This file was generated on Tue Dec  4 16:45:26 2012 UTC #  

You should be able to convert that into something that you can use to block TOR.

| improve this answer | |
  • Neato. How frequently does that change? – ceejayoz Dec 4 '12 at 17:38
  • 1
    @ceejayoz It can change very frequently, as exit nodes enter and leave the network. – Michael Hampton Dec 4 '12 at 18:10
  • Is there any way to translate this list of IPs into actual firewall rules easily? I'd rather NOT have to go through this by hand and add firewall rules for each and every IP. – Thomas Ward Dec 2 '13 at 17:59
  • @ThomasW.: It would be fairly easy to do that. – user9517 Dec 2 '13 at 21:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.