4 ms·
Your blog is blocking Tor users with a 403 forbidden response, letting you know in case it's not intentional.
by crtasm 9y ago
Your blog is blocking Tor users with a 403 forbidden response, letting you know in case it's not intentional.
- stevekemp 9y agoMy server blocks all users who access /wp-admin.php, and make other automated exploit-attempts, for 8-48 hours. The fact that a high number of such attempts come over Tor is disappointing, but should surprise nobody. I've no desire to blacklist Tor exit nodes as such, but I'm going to go out of my way to whitelist them when they are a source of malicious traffic
- crtasm 9y agoMy viewpoint is that other than making logfiles less chatty that doesn't really achieve anything (providing I've well configured/hardened my server of course). Tor exit nodes are also a source of lots of non-malicious traffic. I understand your position though.