[tor-relays] Intrusion Prevention System Software - Snort or Suricata

[Markus Koch]

Sounds great, but the reality is many sites will not block Tor traffic
but will send (automated) abuse mails over and over and over again.
Had this with a bank in South Korea who sent weekly abuse mails with
"we will sue you in the USA, we will sue you in South Kora and we will
never ending suing you all over the world" besides my e-mail to
multiple bank e-mail accounts how to block Tor traffic from reaching
the banks website.

For whatever reason they dont block Tor traffic and thats their right.

And the ISP gets abuse mails with the content "We sue you
motherfucker" and gets mad. I completely understand that. Its easier
to send out automated abuse mails and tell my boss "look, 1000 abuse
mails, I am protected this website like Godzilla". Looks good on every
weekly work report. Numbers count.

Markus


2016-10-05 13:01 GMT+02:00 Ralph Seichter <tor-relays-ml at horus-it.de>:
> On 04.10.2016 23:55, oconor at email.cz wrote:

>
> As far as abuse complaints go, I encourage ISPs to pass these along to
> the Tor operators and not spend any time and resources beyond that. Most
> Tor operators are hopefully responsible enough to process complaints in
> a reasonable fashion. That, in my opinion, does not mean blocking every
> destination IP out of sheer reflex, but rather informing the complaining
> party about Tor. The CP is free to block Tor exits, but I believe that
> it is their own job, not the job of every Tor operator or ISP. Also, I
> don't feel any obligation to spend time making the life of some person
> running an outdated, unprotected WordPress installation easier. ;-)
>
> -Ralph
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays