3 ms·
> You block TOR. More complaints that some users cannot access, but other than that no more complaints about spam. Sure, if this worked. But it's not 2010 any
by phil21 6y ago
> You block TOR. More complaints that some users cannot access, but other than that no more complaints about spam.
Sure, if this worked. But it's not 2010 any more. Simple stuff like this only stops the most technologically illiterate attacks.
If your site is being attacked by more than bubba the local "computer guy" - they will be using proxies indistinguishable from your normal traffic, assuming you do any volume at all.
It's just a silly exercise in futility. I put it up there with moving sshd from port 22 to a random port. Yeah, you get less spam I suppose, but it sure as hell didn't make you any more secure. Probably the opposite.
Outright blocks of "bad IPs" are not that useful in my opinion. However, developing reputation systems around IPs and using "is tor" as one metric certainly has shown it's uses in my field of work.
- peteretep 6y ago> Simple stuff like this only stops the most technologically illiterate attacks. If 90% of spam that requires human moderation comes from those, this seems like an excellent starting point though, as indeed is moving your ssh port. Security is in layers.
- girvo 6y agoMost attacks in my experience over the last 15 years are exactly that, though: simple uncomplicated ones
- varispeed 6y agoOk so you bashed the method I used and you have not provided any examples how this could be done better. That is unhelpful.