Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
loopback999
Explorer

block tor exit nodes using custom feed

Hello All, 

 

anyone had used custom feeds to block tor exit nodes.

followed this sk https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

 

but running into issue when i use this url feed.

 

[Expert@mgmt1:0]# ./ip_block_activate.sh -a on -g gw_list.txt -f feeds_list.txt -s /home/admin/ip_block.sh

FW1 response:

ip_block: Malicious IP blocking mechanism is ON

Warning, cannot connect to https://check.torproject.org/torbulkexitlist

FW2 response:

ip_block: Malicious IP blocking mechanism is ON

Warning, cannot connect to https://check.torproject.org/torbulkexitlist

[Expert@mgmt1:0]# cat feeds_list.txt

https://check.torproject.org/torbulkexitlist

#https://secureupdates.checkpoint.com/IP-list/TOR.txt

[Expert@mgmt1:0]#

0 Kudos
1 Reply
AaronCP
Advisor

What do you see in the logs? An nslookup of that domain returns the IP of 116.202.120.181. It could be the gateway needs a rule adding to allow the traffic.

 

If you run curl_cli https://check.torproject.org/torbulkexitlist on the gateway, what does it return?

 

Do you have any other feeds you're using that do work?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events