1

I have a website written in ASP.NET MVC (and that means, it runs on windows server), that i want to protect from tor users. I thought about setting up some rules on windows firewall to block tor incoming connections, or something like that. Does anyone have any advices maybe? I would be very grateful.

Improve this question
5
  • ... "Protect" ?
    – Ignacio Vazquez-Abrams
    Dec 4, 2012 at 16:23
  • Yes. Protect. When someone from darknet hacks your website, there is no way you will track them. Thats why i need to disable it.
    – ojek
    Dec 4, 2012 at 16:26
  • 5
    You're probably better off hardening your application rather than trying to block all avenues of attack. Tracking down a hacker very rarely does any good anyway, since they're usually behind some other form of anonymizer anyway. Or, even if you did find them they're often in countries that won't help you out.
    – Kyle
    Dec 4, 2012 at 17:06
  • 2
    Don't do this without a very good reason. "I'm afraid of being hacked" isn't a good reason. There are a large number of legitimate uses for Tor, and besides, you can't easily track down somebody who isn't using it when they break into your site, if they have half a clue. You lose visitors, and gain nothing, by blocking Tor.
    – Michael Hampton
    Dec 4, 2012 at 18:12
  • 1
    Others saying this is a bad idea are right. However, often the person doing the implementing is not the person who made that decision.
    – Joel Coel
    Dec 4, 2012 at 18:21

1 Answer 1

Reset to default
4

You can get a list of TOR exit nodes from https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=your.ip.add.ress where your.ip.add.ress is the IP address address of your server. 

# This is a list of all Tor exit nodes that can contact your.ip.addr.ess on Port 80 #
# You can update this list by visiting https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=my.ip.addr.ess #
# This file was generated on Tue Dec  4 16:45:26 2012 UTC #
103.4.16.118
105.237.3.134  
.
.
.
98.250.89.34
99.194.201.167

You should be able to convert that into something that you can use to block TOR.

Improve this answer
4
  • Neato. How frequently does that change?
    – ceejayoz
    Dec 4, 2012 at 17:38
  • 1
    @ceejayoz It can change very frequently, as exit nodes enter and leave the network.
    – Michael Hampton
    Dec 4, 2012 at 18:10
  • Is there any way to translate this list of IPs into actual firewall rules easily? I'd rather NOT have to go through this by hand and add firewall rules for each and every IP.
    – Thomas Ward -On Strike
    Dec 2, 2013 at 17:59
  • @ThomasW.: It would be fairly easy to do that.
    – user9517
    Dec 2, 2013 at 21:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.