3 ms·
For small sites, I would just use a simple firewall: 1. whitelist the finite IP ranges for the regional ISPs/country where you do business 2. blacklist the pr
by Joel_Mckay 4y ago
For small sites, I would just use a simple firewall:
1. whitelist the finite IP ranges for the regional ISPs/country where you do business
2. blacklist the proxy and tor exit nodes
3. blacklist the list of published compromised servers
4. add spamhaus blacklists
5. add fail2ban rules to trip on common server security scans, and unused common service ports
6. publicly reply to those having access issues, and imply they have bad neighbors.
This will often take care of 99% of the nuisance traffic, but I still recommend live monitoring traffic regularly. ;)
- philprx 4y agoTor users are often legitimate good internet citizens. A lot of (lucky) us have the luxury to live in real democracies. Some others live in countries that use every single aspect of their private lives (DPI, mass surveillance) to put pressure on them and bend them to the regime's will. In my opinion, Tor and anonymity should not be killed as a result of silly bots.
- Joel_Mckay 4y agoYour opinion is duly noted, and I agree most knowledge should be equally accessible to give everyone a chance to grow. That being said, a commercial site owes nothing to financially irrelevant bandits, sociopaths, or shills. Try it for a week, and then weigh the liability again. ;)
- RL_Quine 4y ago> Tor users are often legitimate good internet citizens. We have had exactly zero traffic from it at any point which was legitimate. Any user who ever showed up with a exit IP ended up being banned eventually, so we just proactively fraud banned anybody who uses one, and anybody that was related to them. There is zero value in allowing anonymizer traffic on your service, and a whole lot to lose.