Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

Blocking Tor

Does anyone have a good way to block the Tor network on an ongoing basis. I have ASM and IPI, but what I am finding is that the Tor IP addresses are not falling under any of the IPI categories even Anonymous Proxy. I also find that the Anonymous proxy category contains a lot of high utilized cloud proxy services so I don't find it to be a viable category to block for our web sites.

I am running 11.4.1 right now and just trying to see if anyone has a way they have been using that keeps up with Tors changing IP addresses.

0
Rate this Question
Comments on this Question
Comment made 22-Dec-2014 by Prabu MOhan 55
you should be able to block it based on the organization these IP's are registered? assume they all falll under tor
0

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

IP Intelligence Service should be add to your Big-IP ASM, IPI gets its intelligence from webroot/brightcloud every 10 mins. You can check a rating here. If you disagree with the rating you can request a change right from the output page. Once the change goes into affect you should get the update within 10 mins and the alarming/blocking behavior you are looking for.also Check your IP from here to see if it is listed: http://www.brightcloud.com/tools/url-ip-lookup.php, If yes, there could be possibly policy misconfiguration on your ASM policy

0