How to annoy the dimwitt that likes to hook up via Tor and cause trouble.

[MinersLantern]

I finally found out that you can download a list of current Tor exit node ips from places like http://torstatus.kgprog.com/ip_list_exit.php/Tor_ip_list_EXIT.csv  there are many sites that do the same. I convert the csv list to dos-text format and stick it in my metis folder. Next, I set up Metis to react on a trigger which responds only to me to load that list into a user variable. Another little script in the same xml file in metis uses 'on enter' to scan that file for a match on anyone who enters the room. If there is a match... kickban. If not, no action.
No more delayed access to speech for the users and no more crapola from the dork person that likes to spam.
Be aware, it is not perfect. It does require me to update that file to keep up with the list of Tor exit nodes. No biggie, since most of them stay online for hours if not days and number over 700 ips. 
It shocked me just how quickly metis can scan all those ips and return the decision to ban or not.
Anyhow.... works for me so far.   

[Pri]

This has already been done. I compiled a list of 11,800 IP addresses two days ago including every exit node in the TOR network. It is in the Hosts section of this forum. If you are a host of a chat room you can gain access to that forum and download the list. It is already in a Peer Guardian 2 format.

- Pri

[MinersLantern]

Very nice. 
But where is the hosts forum?
the only thing I see as hosts is some norwegan language thing. I dont do norway.  lol
 

[MinersLantern]

I dont do pg either, there are faster ways. But the list can be useful.

[Bluey_412]

you need to contact Forum site admins, register as a host, then Wallah!

[reef]

I dont do pg either, there are faster ways. But the list can be useful.

How are there faster ways than them not being able to enter to begin with? No matter what metis script you run they still gain entry and metis reads the file and searches for a match. Metis does read the files very quickly but still, PG is the better way to go in my opinion.

[Bluey_412]

And the PG2 method uses only the list that is being made available, not a bluetak list, and only hosts need to use it

[Pri]

I dont do pg either, there are faster ways. But the list can be useful.

PG2 is much faster than Metis. I already considered the Metis method but its speed in reading in such a large database of files is to slow and would allow a spammer to use auto-message on entry to get messages out before the entire IP list is read.

And I intend to continue updating my Blocklist indefinitely. The larger it gets the slower Metis would read in the database.

[shelley1966]

miners unless you are a host u cannot see the hosts section so plz let me know if u do host a room

[MinersLantern]

I am a host but the spammer or anyone else using Tor gets banned instantly without any time to post a single word in the room. Still doing it using metis and a live updated text file listing the ips of exit nodes which I update once every few days during tors busiest times of use. I did find the rather large file of 11,000 ? ips on another site but upon examination decided it was just a little too inclusive. Ips such as 0.0.0.1-0.0.255.255 and such are not Tor and cannot connect anyway since ips like that dont exist. The thing im doing now is working perfectly and I still see no reason at all to use PG2. There is no delay to normal users getting access and no delay in eliminating any Tor proxy users either. For me anyway, I consider the problem solved. So no need to block over 10,000 more ips than I need to block. But, thanks anyway.

[GhostShip]

Its great to hear folks are having success in a big way in dealing with the childish person or persons who have tried to attack and fragment the community, whatever solution works for folks is always the one to use and diversity of methods is also a good thing, united we shall remain as a community in our efforts whatever tools or method are chosen.

[Pri]

I am a host but the spammer or anyone else using Tor gets banned instantly without any time to post a single word in the room. Still doing it using metis and a live updated text file listing the ips of exit nodes which I update once every few days during tors busiest times of use. I did find the rather large file of 11,000 ? ips on another site but upon examination decided it was just a little too inclusive. Ips such as 0.0.0.1-0.0.255.255 and such are not Tor and cannot connect anyway since ips like that dont exist. The thing im doing now is working perfectly and I still see no reason at all to use PG2. There is no delay to normal users getting access and no delay in eliminating any Tor proxy users either. For me anyway, I consider the problem solved. So no need to block over 10,000 more ips than I need to block. But, thanks anyway.

I don't know if your Metis is reading through a text file for IP's (Slow) or using a different database. But you can use this if you wanted to as an alternative to doing it yourself: www . mxpulse . com/board/viewtopic.php?f=9&t=194

I've had to separate the link out as I am still unable to post Links on the forum. (Can a Mod check this out please?)

I wrote this after you post here when I realised there was a solution to using PG2 blocklists with Metis. The script is able to download PG2 blocklists automatically, by default it will download the one I compiled but it can be used with any list with a command provided in the script.

[Max™]

Hi Miners,
i know it sounds like alot of IP's to block,
but ive seen the spammer banned from a room then re-enter with a different IP & hit it again 4 mins later,
if he can change Ip's that fast, then you will be forever updating as you see a new IP, possible he will change faster than you can update,
Pri's auto updating one does it for you.

[MinersLantern]

True he can and will change ips that fast. But when you already have an updated (semi-live) list of the exit nodes all over the planet, he change click his little 'change identity' button all he wants to.
He gets banned, then banned again, then banned again, etc. If the monkey wishes to spend his time entering just to be banned and clicking a mouse to try again just to fail again, I have no problem with it. To me its simply amusing. If I weren't in the middle of buying a house, I would spend time setting the bot to annoy and irritate the little pest as well before banning. In the real world though, certain other things take priority.