OPNsense Forum

English Forums => General Discussion => Topic started by: maurotb on August 20, 2020, 10:52:14 PM

Title: How to block TOR
Post by: maurotb on August 20, 2020, 10:52:14 PM
Hi,
i need to block TOR network,
there is an equivalent of pfblockng in opnsense?
Thanks
Title: Re: How to block TOR
Post by: robgnu on August 21, 2020, 06:39:20 AM
Hi,

you can create an alias (URL table) with a blacklist file. Then you can define Block/reject rules on your interfaces.

I use this list:
http://panwdbl.appspot.com/lists/ettor.txt

Robert
Title: Re: How to block TOR
Post by: mimugmail on August 21, 2020, 10:29:19 AM
Firehol Level 3 also includes Tor Exit nodes
Title: Re: How to block TOR
Post by: maurotb on August 22, 2020, 07:07:36 PM
Thanks!
Title: Re: How to block TOR
Post by: fabian on August 22, 2020, 10:22:54 PM
I think it would be possible to create that list using tor itself as it has the list in memory. However the tor project  provides an API endpoint by itself: https://check.torproject.org/torbulkexitlist

Please no not query it excessively - maybe once a day.