[tor-relays] Sinkhole IPs to block for Cryptolocker and Gameover Zeus

grarpamp grarpamp at gmail.com
Wed Jun 11 19:58:06 UTC 2014


On Wed, Jun 11, 2014 at 4:17 AM, Adam Brenner <adam at aeb.io> wrote:
> I have complied a list of Sinkholes from CBL for both Cryptolocker and
> Gameover Zeus. Consider adding these IPs to your ExitPolicy reject list.

Here are lists of other useless "bad' stuff on the clearnet for which
exit operator might receive a complaint for contacting:
...
...
...

Has anyone evaluated the network [dirdata, client] cost of
bloating 1200+ exits worth of 1000+ line exitpolicies, versus
[circuit] cost blocking them with external packet filters.

And the classic issue of when those IP's are eventually
cleared and used for "good' stuff, but laziness tends not
to delist them, so exit becomes less useful and traffic
skews.


More information about the tor-relays mailing list