https://www.dan.me.uk/torlist/ Rohliste öffnen Beschreibung
Erfasst neben den Austrittsknoten auch Eingangs- und Mittelknoten, ist also deutlich umfangreicher als die offizielle Liste. Sinnvoll, wenn jede Beteiligung am Tor-Netz erkannt werden soll. Der Betreiber bittet darum, die Liste höchstens halbstündlich abzurufen.
Integration
Address list per script
Fetch the list and import it into an address list called blocklist:
/tool fetch url="https://www.dan.me.uk/torlist/" dst-path=blocklist.rsc
/import blocklist.rscIf the list is a plain text file with one address or CIDR per line, convert it first:
/tool fetch url="https://www.dan.me.uk/torlist/" dst-path=blocklist.txt
:foreach line in=[/file get blocklist.txt contents] do={
/ip firewall address-list add list=blocklist address=$line comment="Tor Node List (dan.me.uk)"
}Use the list in the firewall
/ip firewall filter add chain=forward src-address-list=blocklist action=drop comment="Tor Node List (dan.me.uk)"
/ip firewall filter add chain=forward dst-address-list=blocklist action=drop comment="Tor Node List (dan.me.uk)"Schedule the fetch with /system scheduler to keep the list current. Very large lists consume RAM, so check the available memory of your device first.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://www.dan.me.uk/torlist/Manual with nftables
wget -qO /tmp/blocklist.txt "https://www.dan.me.uk/torlist/"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist dropipset create blocklist hash:net -exist
curl -fsSL "https://www.dan.me.uk/torlist/" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROPPersist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
Add the list as an ipset in /etc/firehol/firehol.conf:
ipset4 create blocklist hash:net
ipset4 addfile blocklist "https://www.dan.me.uk/torlist/"
blacklist4 full inface any src ipset:blocklistReload with firehol try and confirm before making it permanent.
- Go to Firewall → Aliases and click +.
- Choose type URL Table (IPs), set a refresh interval (for example 1 day) and paste the URL below.
- Save and apply, then use the alias as source in a block rule under Firewall → Rules.
https://www.dan.me.uk/torlist/- Go to Firewall → pfBlockerNG → IP → IPv4 and click Add.
- Paste the URL below as source, set State to ON and pick the action (Deny Both is the usual choice).
- Save, then run Update → Force Reload → IP.
https://www.dan.me.uk/torlist/curl -fsSL "https://www.dan.me.uk/torlist/" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Tor Node List (dan.me.uk) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)Letzte Änderungen
Kürzlich hinzugefügte Einträge
- 103.152.178.119
- 103.166.187.253
- 103.253.212.243
- 103.69.224.24
- 103.83.87.103
- 103.84.206.82
- 104.152.209.153
- 104.244.73.193
- 104.244.73.43
- 108.31.106.124
- 109.76.255.77
- 118.16.224.3
- 119.106.119.210
- 130.110.9.205
- 131.123.40.103
- 136.243.93.102
- 136.38.71.4
- 138.3.209.153
- 138.59.18.105
- 139.162.208.30
- 141.78.150.202
- 143.20.64.228
- 145.241.217.53
- 145.40.199.236
- 146.135.100.67
Kürzlich entfernte Einträge
- 1.248.96.163
- 102.205.44.5
- 103.109.100.207
- 103.175.3.2
- 103.209.24.218
- 103.241.51.43
- 104.223.62.71
- 104.4.174.69
- 107.172.187.89
- 107.174.127.120
- 108.181.70.103
- 108.85.14.130
- 109.238.11.6
- 114.188.76.104
- 118.104.88.110
- 118.27.12.40
- 119.15.100.173
- 129.80.149.163
- 130.61.169.121
- 134.101.142.131
- 134.41.212.85
- 135.125.183.193
- 136.243.3.60
- 137.74.116.24
- 139.144.207.13