jkullick/block-tor-exit-nodes-iptables.md

Last active November 5, 2024 10:40

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/jkullick/62695266273608a968d0d7d03a2c4185.js"></script>
Save jkullick/62695266273608a968d0d7d03a2c4185 to your computer and use it in GitHub Desktop.

Download ZIP

Block Tor Exit Nodes with IPTables

Raw

block-tor-exit-nodes-iptables.md

Install ipset:

apt-get install ipset

Create new ipset:

ipset create tor iphash

Read Tor Exit Node List and add to ipset:

curl -sSL "https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=$(curl icanhazip.com)" | sed '/^#/d' | while read IP; do
  ipset -q -A tor $IP
done

Note: This should run as daily cronjob.

Block ipset with iptables:

iptables -A INPUT -m set --match-set tor src -j DROP

Source

zouppen commented Nov 10, 2022

I made a version with systemd timer and deployment instructions: https://gist.github.com/zouppen/bc005e0038860164714f0cdf376369b4