Hi Just my 50 cent to this. I consider blocking of the network as an act of last resort. Instead you need to make the life for the spammer more difficult. Having a moderator might be a better idea. Maybe moderate just the incoming posts from suspect IPs. Blocking implies always to exclude legit traffic as well. This removes the freedom of a user. In my experience there are chances that he find another way around. Then you need to update the list again....makes your life more difficult. Hope this can help you. best regards akendo On Mon, Sep 28, 2015 at 10:58:31AM +0000, Sharif Olorin wrote: > Hi Colin, > > > They are using tor services to generate their multiple ips. Recent exit nodes ips (is that the right terminology?) used on the 27/09/2015 have included: > > > > [ ... ] > > Yep, that's the right terminology. > > > I have sent similar emails to the 'abuse' email address I have been > > able to find for these ip networks, will they be able to help us? > > They might be. If you email the exit node operators[0] and let them know > you're receiving abusive traffic via the web (port 80/443), and include > the IP address(es) of your forum, they may be able to restrict their > exit policy to block traffic to your server. That said, there are > currently over a thousand exit nodes, most of which allow web traffic, > so this may not be the most efficient solution. > > > However, our current problem individual is using your services to > > perpetrate the very oppressive, abusive behaviour that your system is > > designed to help fight. Please let me know if there is anything you > > can do. > > Another option is the Tor DNS blocklist[1]. If you have a dedicated > server or VPS you can configure it to reject traffic from Tor exits > (e.g., for Apache[2]). If you don't have a dedicated server or VPS, you > might be able to set this up in the forum software itself (e.g., for > phpBB[3]). > > I hope the above is helpful. Once the troll gets bored and goes away, I > hope you'll consider opening up your forum to well-behaved Tor users. > > Regards, > Sharif > > [0] Most exits have this information on a webpage served from the exit > node IP, e.g., http://92.222.113.177/; you can also often find this > information via atlas, e.g., > https://atlas.torproject.org/#search/92.222.113.177. > > [1] https://www.torproject.org/projects/tordnsel.html.en > > [2] https://wiki.apache.org/spamassassin/DnsBlocklists > > [3] https://www.phpbb.com/customise/db/mod/advanced_block_mod/ > > -- > OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57 > -- > tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx > To unsubscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Attachment:
signature.asc
Description: PGP signature
-- tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk