Delivery-Date: Mon, 28 Sep 2015 10:05:36 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 730091E03C7;
	Mon, 28 Sep 2015 10:05:34 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 18B943788E;
	Mon, 28 Sep 2015 14:05:29 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id B9D823786F
 for <tor-talk@lists.torproject.org>; Mon, 28 Sep 2015 14:05:24 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id KUsGLwyJKvfm for <tor-talk@lists.torproject.org>;
 Mon, 28 Sep 2015 14:05:24 +0000 (UTC)
Received: from mail.akendo.eu (mail.akendo.eu [5.9.102.248])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 65F4937863
 for <tor-talk@lists.torproject.org>; Mon, 28 Sep 2015 14:05:24 +0000 (UTC)
X-Greylist: delayed 422 seconds by postgrey-1.34 at eugeni;
 Mon, 28 Sep 2015 14:05:24 UTC
Received: from localhost (localhost [127.0.0.1])
 by mail.akendo.eu (Postfix) with ESMTP id 69ABBC5667
 for <tor-talk@lists.torproject.org>; Mon, 28 Sep 2015 15:59:54 +0200 (CEST)
Authentication-Results: mail.akendo.eu (amavisd-new); dkim=pass
 reason="pass (just generated, assumed good)" header.d=akendo.eu
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=akendo.eu; h=
 user-agent:in-reply-to:content-disposition:content-type
 :content-type:mime-version:references:message-id:subject:subject
 :to:from:from:date:date; s=dkim; t=1443448786; x=1444312787; bh=
 EFYKTJnWBo/+dt4+x6pdv9C+454B8lbnx0sBab2vQcU=; b=lC8RHMD3fu/1EkdS
 358E6ED5wVgfnFrtyOn2s8xVzWZcAHO4jeCYRmepi03Tw1OkK0+BRlXMKwTwsAMU
 aAFyYoURuF+uZUdJ9A63B/8D5xpkSLCNcfcrgsnO2xKyC3YP1xm2Zp+NpSEGzfVZ
 njQ2hlBLqvz8fy+cSG0IZJcgMn0=
X-Virus-Scanned: Debian amavisd-new at mail.akendo.eu
Received: from mail.akendo.eu ([127.0.0.1])
 by localhost (mail.akendo.eu [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id PJ-ujrNI3f9N for <tor-talk@lists.torproject.org>;
 Mon, 28 Sep 2015 15:59:46 +0200 (CEST)
Received: from x240.lan (ip5f5af388.dynamic.kabel-deutschland.de
 [95.90.243.136])
 by mail.akendo.eu (Postfix) with ESMTPSA id B924BC5665
 for <tor-talk@lists.torproject.org>; Mon, 28 Sep 2015 15:59:42 +0200 (CEST)
Date: Mon, 28 Sep 2015 15:58:20 +0200
From: akendo <akendo@akendo.eu>
To: tor-talk@lists.torproject.org
Message-ID: <20150928135820.GA3494@x240.lan>
References: <AM2PR09MB0228A926673B116A340EFA3AFC4F0@AM2PR09MB0228.eurprd09.prod.outlook.com>
 <1443436346-sup-4029@metis.syd1.tesser.org>
MIME-Version: 1.0
In-Reply-To: <1443436346-sup-4029@metis.syd1.tesser.org>
User-Agent: Mutt/1.5.24 (2015-08-30)
Subject: Re: [tor-talk] Please help us...
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============4296679307010718215=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============4296679307010718215==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="ZGiS0Q5IWpPtfppv"
Content-Disposition: inline


--ZGiS0Q5IWpPtfppv
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi=20

Just my 50 cent to this.

I consider blocking of the network as an act of last resort.
Instead you need to make the life for the spammer more difficult.

Having a moderator might be a better idea. Maybe moderate just the incoming=
 posts from suspect IPs.

Blocking implies always to exclude legit traffic as well. This removes the =
freedom of a user. In my experience there are chances that he find another =
way around. Then you need to update the list again....makes your life more =
difficult.

Hope this can help you.

best regards
akendo

On Mon, Sep 28, 2015 at 10:58:31AM +0000, Sharif Olorin wrote:
> Hi Colin,
>=20
> > They are using tor services to generate their multiple ips. Recent exit=
 nodes ips (is that the right terminology?) used on the 27/09/2015 have inc=
luded:
> >=20
> > [ ... ]
>=20
> Yep, that's the right terminology.
>=20
> > I have sent similar emails to the 'abuse' email address I have been
> > able to find for these ip networks, will they be able to help us?
>=20
> They might be. If you email the exit node operators[0] and let them know
> you're receiving abusive traffic via the web (port 80/443), and include
> the IP address(es) of your forum, they may be able to restrict their
> exit policy to block traffic to your server. That said, there are
> currently over a thousand exit nodes, most of which allow web traffic,
> so this may not be the most efficient solution.
>=20
> > However, our current problem individual is using your services to
> > perpetrate the very oppressive, abusive behaviour that your system is
> > designed to help fight. Please let me know if there is anything you
> > can do.
>=20
> Another option is the Tor DNS blocklist[1]. If you have a dedicated
> server or VPS you can configure it to reject traffic from Tor exits
> (e.g., for Apache[2]). If you don't have a dedicated server or VPS, you
> might be able to set this up in the forum software itself (e.g., for
> phpBB[3]).
>=20
> I hope the above is helpful. Once the troll gets bored and goes away, I
> hope you'll consider opening up your forum to well-behaved Tor users.
>=20
> Regards,
> Sharif
>=20
> [0] Most exits have this information on a webpage served from the exit
> node IP, e.g., http://92.222.113.177/; you can also often find this
> information via atlas, e.g.,
> https://atlas.torproject.org/#search/92.222.113.177.
>=20
> [1] https://www.torproject.org/projects/tordnsel.html.en
>=20
> [2] https://wiki.apache.org/spamassassin/DnsBlocklists
>=20
> [3] https://www.phpbb.com/customise/db/mod/advanced_block_mod/
>=20
> --=20
> OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57



> --=20
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


--ZGiS0Q5IWpPtfppv
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=SGN6
-----END PGP SIGNATURE-----

--ZGiS0Q5IWpPtfppv--

--===============4296679307010718215==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============4296679307010718215==--

