On 03/10/2014 01:14 PM, Tora Tora Tora wrote:
I just recently allowed the directory ports of my relay to be listed and noticed that some IPs are a bit overzealous in connecting to the directory port. As in 108 connections within a minute zealous.
Is this unusual?
I think it is unusual.
Are you just checking the tor log to see this?
Anyone knows the answer? It happened again with another IP establishing 400+ connections to directory port within a minute. Me thinks it was not a good idea to display the directory port.
Maybe try installing some ip blacklist or dynamic firewalling?
rblcheck is a debian package which may be relevant.
Maybe time to do some more research...
Good luck Zenaan