[tor-talk] Tor Reject Exit Policy to Syria, Iran, Belarus, Saudi Arabia, Moldavia, Qatar, etc?

Fabio Pietrosanti (naif) lists at infosecurity.ch
Sun Oct 2 19:23:15 UTC 2011


Hi,

i made some dirty stats by looking at all "reject" lines in Exit
Policies from cached-descriptors.

Then i sorted them, uniq'ed them and made a geoip look on top of them.

Attached you can find the file on which stats are done
(cached-descriptors extraction from 2 October 2011 20.30 GMT+1).

The scripts (ugly and dirty) and files of brief analysis are:
SCRIPT-1:
http://privacyresearch.infosecurity.ch/blocktest/extract-blacklisted-ip.sh
RESULT-1: http://privacyresearch.infosecurity.ch/blocktest/blacklisted.txt

SCRIPT-2: http://privacyresearch.infosecurity.ch/blocktest/blacklist-stat.sh
RESULT-2:
http://privacyresearch.infosecurity.ch/blocktest/blocklist-stat.txt

It's interesting to notice that the amount of IP blocked in Tor Exit
Policies for countries that apply censorship are:
SY 147
IR 76
BY 43
SA 30
MD 8
QA 6

It would be interesting to further analyze:
- Which Tor Exit Node  reject IP to Syria, Iran, Belarus, Saudi Arabia,
Moldavia and Qatar?
- Which is the reason to block IP addresses destinated to that country?
- What's running on that systems to get blocked?

It would probably require some further investigation, but weekend is
finishing and i have no more time to look at it.

If someone would like to check it, eventually using some python magic
with a parsers of cached-descriptors fine, it would be interesting to
see the results and/or resulting tool to make the analysis.

-naif


More information about the tor-talk mailing list