[tor-relays] Handling abuse request about stopforumspam.com

[Tim Wilson-Brown - teor]

> On 15 Dec 2015, at 18:24, Eran Sandler <eran at sandler.co.il> wrote:
> 
> Hi guys,
> 
> One of my tor server seems to be getting a lot of abuse reports from the ISP from stopforumspam.com <http://stopforumspam.com/>.
> 
> http://www.stopforumspam.com/ipcheck/212.47.246.21 <http://www.stopforumspam.com/ipcheck/212.47.246.21>
> 
> Any idea how to reduce those to a minimum in a reasonable way?

Ideally, the forums would work out some way to block connections based on behaviour, rather than source IP.
But in the absence of such sensible measures, there are some things you can do.

Can you block particular IP ranges / ports in your exit policy to avoid the complaints?

For example, if the complaint is from a destination 1.2.3.4:80, add a rule at the *top* of your exit policy saying:
ExitPolicy reject 1.2.3.4:80

You can add IPv6 addresses, port ranges and address masks too:
ExitPolicy reject 1.2.3.4/24:443-445
ExitPolicy reject [2002::abcd]:8080

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B

teor at blah dot im
OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20151216/4e3d1cf6/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20151216/4e3d1cf6/attachment-0001.sig>