How to block tor browser from my site?

10 replies
hello everyone i face an issue with people making more than 1 account on my site and so far i have made it so you can only make 1 account per IP address.. now i face a new issue with people using tor browser to change there ip address.

My question is how can i block tor browser from loading my site?
#block #browser #site #tor
  • Profile picture of the author johndoejohndoe
    I wouldn't worry about it. From what I've read, if you find a way to block tor, they'll find a way around it. Just be glad you actually have site visitors.
    {{ DiscussionBoard.errors[5614463].message }}
  • Profile picture of the author tahoecale
    Just be glad people are cheating by making more than 1 account and ruining my site.. no thanks i need a fix for this issue.
    {{ DiscussionBoard.errors[5616513].message }}
  • Profile picture of the author rainso0
    to monitor other computers, the WFilter computer needs to connect to a mirroring port of your switch. Please check this topic for more details: Why WFilter can not monitor other computers?
    Tor browser uses TLS protocol to encrypt its traffic. To block tor, you need to enable "HTTPS black/white list" of WFilter. This blog topic might be helpful: How to block tor?
    Signature
    {{ DiscussionBoard.errors[5616914].message }}
    • Profile picture of the author Lovelogic
      On a shared webhosting server the number of options are somewhat reduced owing to the lack of true root access to both the actual server & its firewall system.

      However, you could try tagging the web browser of new signups using an 'Evercookie' script, though unlikely to hinder a true geek it will catch out those less experienced users with its self spawing abilities.

      Failing that get a recent list of Tor server IPs and block the lot with the htaccess file. proxy.org/tor.shtml is a good place to start looking.

      Vaugely recall something from a Blackhat conference back in 2007 about using JAVA to get the un-proxied IP as this does not obey the same rules for server callbacks check the jermiah Grossman Blog there may be something in there.
      {{ DiscussionBoard.errors[5618629].message }}
  • Profile picture of the author sautaja
    One way is to block the tor server ip addresses on hardware/software firewall level.

    tor server ip list:
    proxy.org / tor.shtml
    Signature
    Jomify - Free multi-channel shopping cart. Open your free store now.
    {{ DiscussionBoard.errors[5620625].message }}
  • Profile picture of the author tahoecale
    Just found the answer!!!! BlockScript.com WOOT

    This website rocks! blocks Tor browser, proxies and a lot more. Any one who wants to stop people from making more than one account on there site this is a great way it won't 100% stop it but it will cut down as most people won't be able to get back to the site. Check it out if you want to block Tor i can guarantee it will block tor it does cost $200 tho for me well worth it
    {{ DiscussionBoard.errors[7478558].message }}
    • Profile picture of the author Brandon Tanner
      Originally Posted by tahoecale View Post

      Just found the answer!!!! BlockScript.com WOOT

      This website rocks! blocks Tor browser, proxies and a lot more. Any one who wants to stop people from making more than one account on there site this is a great way it won't 100% stop it but it will cut down as most people won't be able to get back to the site. Check it out if you want to block Tor i can guarantee it will block tor it does cost $200 tho for me well worth it
      Not all proxy traffic is bad, as many people are forced to use proxies at work, school, public WIFI, etc. So if you use a script that blocks proxy IP's (which is never going to be very reliable anyways, for several reasons), then you risk alienating a lot of legit traffic in addition to the bad traffic.

      And if you block only Tor proxies, then someone savvy enough to know how to use Tor will know how to switch to a regular proxy in 2 seconds, and will then have instant access to your site.

      So... just a few things to consider before you spend money on a proxy blocking script.
      Signature

      {{ DiscussionBoard.errors[7479844].message }}
      • Profile picture of the author tahoecale
        Originally Posted by Brandon Tanner View Post

        Not all proxy traffic is bad, as many people are forced to use proxies at work, school, public WIFI, etc. So if you use a script that blocks proxy IP's (which is never going to be very reliable anyways, for several reasons), then you risk alienating a lot of legit traffic in addition to the bad traffic.

        And if you block only Tor proxies, then someone savvy enough to know how to use Tor will know how to switch to a regular proxy in 2 seconds, and will then have instant access to your site.

        So... just a few things to consider before you spend money on a proxy blocking script.

        Well it blocks a lot more than just tor and i really don't want people using proxies on my site.
        {{ DiscussionBoard.errors[7598952].message }}
  • Profile picture of the author SteveSRS
    don't forget that this script is going to slow down you website loading significantly...
    {{ DiscussionBoard.errors[7599359].message }}
    • Profile picture of the author tahoecale
      Originally Posted by SteveSRS View Post

      don't forget that this script is going to slow down you website loading significantly...

      I really have not noticed a difference. yet there are some settings you can turn on that give warring's about if you turn it on it will slow the site. but i have them turned off. My issue is that i do not want people have more then 1 account. and this is a big helper. yet i do lose out on many legit clients do to being blocked. But i hate people who make more than one account it really hurts my site.
      {{ DiscussionBoard.errors[7603791].message }}

Trending Topics