block tor exit nodes using custom feed

loopback999 — Fri, 09 Sep 2022 13:50:27 GMT

Hello All,

anyone had used custom feeds to block tor exit nodes.

followed this sk https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk103154#Custom%20IP%20feeds

but running into issue when i use this url feed.

[Expert@mgmt1:0]# ./ip_block_activate.sh -a on -g gw_list.txt -f feeds_list.txt -s /home/admin/ip_block.sh

FW1 response:

ip_block: Malicious IP blocking mechanism is ON

Warning, cannot connect to https://check.torproject.org/torbulkexitlist

FW2 response:

ip_block: Malicious IP blocking mechanism is ON

Warning, cannot connect to https://check.torproject.org/torbulkexitlist

[Expert@mgmt1:0]# cat feeds_list.txt

https://check.torproject.org/torbulkexitlist

#https://secureupdates.checkpoint.com/IP-list/TOR.txt

[Expert@mgmt1:0]#

Re: block tor exit nodes using custom feed

AaronCP — Fri, 09 Sep 2022 19:33:52 GMT

What do you see in the logs? An nslookup of that domain returns the IP of 116.202.120.181. It could be the gateway needs a rule adding to allow the traffic.

If you run curl_cli https://check.torproject.org/torbulkexitlist on the gateway, what does it return?

Do you have any other feeds you're using that do work?

topic block tor exit nodes using custom feed in Firewall and Security Management

block tor exit nodes using custom feed

Re: block tor exit nodes using custom feed