Hello,
The `Enkidu-6/tor-ddos` project was shut down in May and its relay lists are no longer updated. I have published replacements that keep the same commands:
-
https://www.google.com/url?q=https://github.com/EnovaMaker/tor-ddos-compat&source=gmail&ust=1792673429890000&sa=E — same scripts (`download.sh`, `multi.sh`, `update.sh`, ...), iptables/ipset, same set names. Run the download line from the directory of your old install and it offers to reuse your addresses and ports.
-
https://www.google.com/url?q=https://github.com/EnovaMaker/tor-relay-lists&source=gmail&ust=1792673429890000&sa=E — the lists, rebuilt from the Tor consensus, under the same file names except `dual-or`, `overloaded` and the Snowflake lists, which are not covered yet. If you read them yourself, change `Enkidu-6` to `EnovaMaker` in the URL.
-
https://www.google.com/url?q=https://github.com/EnovaMaker/nixos-tor-anti-dos&source=gmail&ust=1792673429890000&sa=E — the same idea as a NixOS module, using nftables.
One difference on purpose: as its README describes the rule, an address is blocked once it has more than two connections, which a one-connection limit never reaches; here a source is blocked after repeated refused connections.
It is not production-tested, and I have not seen a real `ipv4.txt` from the old scripts, so I would like to hear from anyone who migrates: did it pick up your addresses and ports, and did it drop any relay that should not have been dropped?
MIT licensed. Independent of the Tor Project and of the author of tor-ddos.
EnovaMaker