search

matomo-org / plugin-TrackingSpamPrevention

GNU General Public License v3.0
12 stars 7 forks source link

Add option to block TOR exit relays #11

Open Starker3 opened 3 years ago

Starker3 commented 3 years ago

Some customers may wish to block tracking requests from TOR exit nodes, since these can often be used for more nefarious reasons than just normal browsing.

It is important to note that there may exist relays that do not allow TOR exits from that relay, but are only used to pass traffic within the TOR network, we would preferably only want to have the option to block exit node IPs from being tracked.

There exists this GitHub repo which has a list of IPs: https://github.com/SecOps-Institute/Tor-IP-Addresses As well as this website https://www.dan.me.uk/tornodes Which provides an exit node IP list: https://www.dan.me.uk/torlist/?exit

There may be other methods of gathering TOR exit node IPs.

sgiehl commented 3 years ago

Some geolocation databases might also be able to detect TOR exit nodes.

Findus23 commented 3 years ago

This should be really simple as TOR is not intended to keep the exit node IPs secret, so one just has to check the official list of IPs: https://check.torproject.org/torbulkexitlist

See also https://blog.torproject.org/changes-tor-exit-list-service for more information.