This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block TOR Proxys? (The Onion Router)

hi guys,

this is my problem: we are runnig an asl6.0 as a proxy server. it only provides port 80 for surfing. there is also the content web filtering module runing. so over the last weeks, while i was checkin log files i found some strange ip+port combos. after some googeling i was linked to eff.org. so i found out that the ips i saw, where part of the tor network, wich provaides anonymously acces to the internet by using the "onion routing" (tor network). 
i downloaded a version of the sofware and made some tests. i was able to get full internet access in a very short time. no website were blocked.
i want to stop this, but i dont know how. can annybody help me about that? maybe a complete documentation about how tor works can give me a hint. but i cant find anything.

i hope somebody can help me and i am sorry for my bad english. i hope you get what i mean.


This thread was automatically locked due to age.
Parents Reply Children
  • i tried but this option would not block it. the tor client does not stop working
  • I would say maybe the IPS could catch it, but since Tor traffic is encrypted, it'd be hard.

    Can you not talk to the people that are doing this?

    Barry
  • that should be the normal way. but they wont stop it. i can not sleep at night as long as tor is working from inside.
  • There is hardly any chance to block that kind of traffic. Its easier to remove the clients from the workstations.
  • Are you using authentication in the http proxy? If so, can you suspend their accounts to show you're serious?

    Barry
  • Any luck with this form of traffic? Have a look at this site for info
    whitedust.net

    Snort sig in policy catagory  :  POLICY TOR Traffic anonymizer server request - ID 9324 

    Do not know if this will work.
  • that should be the normal way. but they wont stop it. i can not sleep at night as long as tor is working from inside.


    Chavez, you could add the list of IP's below to a to a network group, adn make a packet filter rule to block all https to the IP's


    12.180.53.27
    12.210.16.72
    128.112.139.71
    128.2.132.175
    128.2.141.33
    128.213.49.23
    128.232.110.15
    128.30.28.19
    128.39.141.245
    128.61.33.204
    128.83.114.63
    129.187.150.131
    129.21.144.146
    129.21.228.88
    129.21.235.5
    129.22.170.183
    129.241.146.126
    130.126.141.153
    130.233.31.185
    131.128.57.15
    131.155.71.110
    131.175.189.134
    131.179.224.133
    131.188.185.41
    131.212.128.101
    132.241.222.72
    134.130.58.205
    134.53.24.52
    136.145.54.123
    137.120.180.50
    137.120.180.65
    137.148.5.13
    137.186.203.38
    137.226.59.249
    138.236.226.221
    139.142.184.213
    140.247.60.64
    140.247.62.119
    140.247.62.121
    141.149.128.197
    141.151.11.182
    141.154.30.240
    141.158.117.185
    141.20.103.68
    141.76.46.90
    143.106.35.156
    143.225.138.34
    144.120.8.219
    145.116.2.192
    149.9.0.21
    150.140.191.102
    151.204.64.80
    151.37.130.242
    151.8.40.35
    154.20.197.21
    154.35.1.8
    155.207.113.227
    157.82.61.22
    158.130.50.3
    168.150.251.36
    170.140.8.149
    18.152.2.242
    18.187.1.68
    18.244.0.114
    18.244.0.188
    18.246.2.33
    18.78.1.38
    192.42.113.248
    192.83.249.30
    192.94.73.4
    193.16.154.187
    193.201.52.56
    193.201.53.118
    193.201.54.32
    193.202.88.3
    193.219.28.245
    193.239.165.73
    193.28.225.8
    193.4.140.225
    194.109.109.109
    194.109.206.212
    194.109.217.74
    194.177.96.122
    194.21.56.6
    194.254.163.170
    194.95.224.201
    195.137.213.113
    195.137.53.121
    195.158.168.91
    195.169.149.213
    195.169.149.45
    195.245.255.11
    195.37.132.28
    195.4.33.106
    195.4.34.130
    195.71.99.214
    195.72.0.6
    195.85.225.145
    198.161.91.196
    198.252.201.22
    198.53.171.191
    198.82.143.115
    199.77.129.53
    200.121.55.151
    202.173.141.155
    203.155.247.4
    203.214.40.55
    203.218.152.56
    203.59.90.71
    203.81.205.245
    203.87.60.80
    204.253.162.11
    206.174.19.25
    206.225.83.5
    207.150.167.67
    207.241.238.149
    208.185.251.121
    208.201.238.46
    208.40.218.131
    209.114.200.129
    209.158.45.74
    209.172.34.176
    209.172.52.78
    209.237.225.10
    209.237.225.244
    209.242.32.13
    209.6.168.183
    209.8.40.177
    211.30.179.86
    212.112.228.2
    212.112.235.78
    212.112.235.83
    212.112.241.137
    212.112.242.159
    212.112.242.21
    212.114.250.252
    212.129.150.55
    212.187.48.185
    212.202.185.218
    212.202.185.218
    212.202.202.61
    212.202.210.148
    212.202.233.2
    212.224.22.39
    212.227.108.114
    212.227.20.171
    212.227.21.133
    212.239.118.83
    212.24.170.230
    212.254.169.67
    212.37.39.59
    212.51.10.6
    212.56.108.4
    212.61.66.38
    212.65.15.99
    213.100.118.133
    213.100.254.163
    213.112.252.71
    213.114.177.177
    213.114.241.157
    213.114.249.104
    213.114.29.49
    213.114.70.228
    213.133.99.185
    213.139.167.121
    213.146.114.96
    213.152.49.145
    213.199.120.94
    213.203.214.130
    213.228.241.143
    213.23.166.241
    213.239.194.175
    213.239.202.232
    213.239.206.174
    213.239.206.209
    213.239.212.133
    213.239.212.206
    213.239.212.45
    213.39.136.173
    213.39.208.142
    213.39.224.249
    213.61.151.217
    213.66.96.2
    213.84.43.3
    213.84.74.36
    213.9.1.108
    216.110.230.24
    216.12.165.46
    216.127.67.122
    216.128.228.129
    216.130.255.201
    216.137.65.86
    216.152.242.200
    216.194.67.53
    216.229.42.234
    216.231.47.120
    216.239.84.251
    216.254.30.234
    216.32.80.75
    216.39.137.58
    216.55.149.21
    217.115.192.218
    217.14.64.70
    217.147.80.73
    217.149.34.124
    217.155.230.230
    217.160.108.109
    217.160.109.40
    217.160.132.150
    217.160.135.169
    217.160.142.69
    217.160.169.57
    217.160.170.132
    217.160.176.49
    217.160.177.118
    217.160.203.26
    217.160.204.97
    217.160.243.3
    217.172.183.219
    217.172.187.46
    217.19.27.52
    217.195.47.235
    217.195.47.250
    217.195.47.90
    217.20.115.110
    217.20.118.52
    217.20.119.144
    217.28.206.143
    217.30.80.251
    217.67.20.124
    217.79.181.118
    217.84.20.164
    219.105.111.74
    219.121.56.122
    220.234.207.167
    24.10.127.243
    24.109.169.177
    24.110.46.122
    24.118.119.93
    24.125.123.117
    24.127.127.0
    24.13.102.7
    24.136.12.209
    24.155.82.33
    24.158.125.162
    24.175.184.12
    24.18.9.231
    24.195.233.60
    24.196.160.242
    24.196.81.188
    24.202.238.201
    24.21.218.164
    24.22.104.31
    24.223.233.77
    24.242.15.236
    24.248.42.6
    24.250.192.233
    24.26.168.120
    24.30.166.167
    24.30.67.89
    24.42.97.30
    24.49.13.143
    24.61.206.174
    24.63.99.6
    24.8.195.218
    24.9.185.227
    24.91.138.153
    24.92.148.113
    24.94.2.121
    24.95.77.45
    38.118.213.59
    38.99.66.86
    58.70.61.200
    59.104.14.202
    60.36.181.86
    61.242.102.18
    61.60.193.99
    62.121.31.116
    62.142.71.120
    62.178.28.11
    62.197.40.155
    62.2.174.20
    62.241.240.86
    62.243.85.164
    62.245.160.221
    62.48.34.110
    62.75.129.201
    62.75.149.130
    62.75.151.195
    62.75.171.154
    63.226.50.201
    63.240.161.99
    63.246.145.70
    63.85.194.6
    64.115.210.23
    64.122.12.107
    64.135.207.45
    64.142.114.146
    64.142.31.83
    64.142.74.86
    64.230.61.228
    64.246.26.190
    64.246.50.101
    64.34.171.70
    64.5.53.220
    64.5.53.33
    64.5.53.76
    64.81.100.208
    64.81.227.88
    64.81.240.144
    64.81.60.157
    64.90.164.74
    64.90.179.108
    64.90.191.94
    64.95.64.86
    65.174.217.58
    65.196.226.32
    65.25.220.178
    65.25.243.192
    65.254.37.163
    65.254.45.209
    65.254.53.253
    65.27.237.240
    65.28.107.89
    65.34.4.116
    65.60.136.107
    65.7.136.249
    65.87.159.80
    66.11.179.38
    66.111.43.137
    66.119.199.39
    66.133.254.180
    66.167.145.76
    66.171.213.151
    66.173.227.152
    66.199.240.50
    66.210.104.251
    66.240.226.11
    66.25.179.124
    66.27.23.221
    66.36.149.5
    66.70.10.53
    66.75.246.142
    66.90.89.162
    66.92.13.212
    66.92.188.226
    66.92.65.81
    66.92.68.250
    66.93.119.120
    66.93.170.242
    66.93.38.182
    67.160.81.217
    67.162.245.33
    67.165.17.208
    67.173.141.4
    67.173.143.46
    67.176.204.108
    67.18.245.109
    67.23.145.190
    67.9.73.103
    68.100.47.107
    68.105.208.9
    68.110.103.159
    68.124.67.183
    68.127.166.152
    68.13.108.179
    68.147.200.77
    68.148.190.38
    68.15.6.112
    68.166.37.86
    68.167.210.150
    68.171.51.78
    68.173.37.136
    68.196.34.109
    68.206.115.47
    68.22.203.57
    68.236.70.84
    68.35.231.249
    68.40.13.117
    68.40.171.66
    68.40.71.110
    68.51.73.79
    68.63.175.251
    68.75.130.19
    68.77.46.181
    68.80.155.150
    68.92.133.155
    68.97.126.56
    68.98.18.98
    69.115.136.99
    69.115.136.99
    69.12.128.187
    69.12.128.32
    69.12.134.80
    69.12.145.165
    69.143.132.120
    69.156.163.231
    69.163.32.140
    69.19.200.4
    69.223.151.51
    69.234.64.214
    69.238.169.111
    69.24.161.198
    69.30.208.78
    69.30.99.210
    69.41.174.196
    69.51.152.43
    69.56.216.138
    69.60.111.222
    69.60.114.226
    69.60.122.49
    69.60.123.22
    69.62.156.11
    69.90.33.237
    69.92.94.253
    69.93.158.203
    69.93.89.162
    70.107.183.65
    70.110.70.238
    70.113.92.185
    70.154.240.195
    70.162.65.208
    70.174.161.159
    70.187.87.248
    70.189.232.20
    70.20.36.160
    70.225.174.68
    70.230.73.20
    70.248.67.160
    70.27.5.5
    70.30.133.219
    70.31.42.165
    70.49.106.177
    70.80.240.218
    70.84.114.153
    70.84.253.4
    70.89.90.165
    71.116.93.118
    71.123.91.194
    71.133.227.217
    71.137.240.249
    71.210.131.125
    71.242.124.82
    71.245.96.91
    71.248.176.135
    71.36.98.117
    71.39.113.14
    72.150.10.129
    72.21.33.202
    72.226.235.186
    72.3.249.87
    72.60.167.126
    72.9.242.90
    80.126.37.100
    80.126.7.66
    80.127.66.162
    80.135.142.100
    80.143.187.33
    80.145.178.17
    80.188.120.29
    80.190.233.18
    80.190.242.122
    80.190.242.130
    80.190.250.139
    80.190.250.83
    80.190.251.24
    80.202.94.130
    80.203.228.236
    80.237.146.62
    80.237.160.201
    80.237.203.179
    80.242.195.68
    80.47.217.105
    80.57.244.213
    80.68.93.199
    80.69.66.227
    80.74.144.159
    80.78.242.241
    81.0.225.179
    81.1.123.182
    81.169.136.161
    81.169.158.102
    81.169.171.212
    81.169.176.178
    81.169.179.142
    81.169.180.180
    81.169.181.10
    81.169.183.70
    81.179.210.50
    81.186.252.150
    81.216.128.130
    81.227.243.7
    81.227.76.106
    81.232.171.52
    81.235.200.91
    81.53.207.146
    81.56.27.175
    81.57.158.21
    81.62.25.76
    81.75.221.33
    82.119.168.20
    82.128.211.126
    82.128.216.146
    82.131.6.73
    82.135.6.122
    82.141.92.180
    82.141.92.235
    82.156.33.125
    82.165.144.169
    82.165.180.112
    82.165.233.43
    82.182.109.115
    82.183.192.131
    82.227.61.106
    82.244.152.77
    82.49.137.161
    82.51.170.216
    82.57.105.249
    82.60.6.171
    82.67.68.163
    82.92.225.162
    82.94.251.206
    83.103.151.156
    83.133.126.131
    83.133.81.20
    83.149.72.45
    83.149.97.103
    83.151.25.186
    83.160.194.169
    83.160.255.58
    83.171.155.111
    83.171.191.230
    83.219.212.101
    83.223.108.108
    83.227.72.118
    83.233.97.28
    83.243.88.133
    83.245.15.87
    83.245.82.184
    83.33.23.15
    83.67.103.151
    84.141.182.242
    84.159.13.229
    84.16.234.49
    84.16.235.143
    84.16.236.173
    84.174.82.31
    84.177.181.48
    84.179.35.76
    84.217.125.240
    84.220.122.177
    84.220.98.187
    84.221.75.14
    84.221.92.228
    84.248.19.49
    84.34.133.217
    84.41.143.100
    84.56.169.94
    84.56.41.121
    84.56.65.169
    84.56.86.102
    84.56.86.96
    84.57.75.167
    84.58.143.182
    84.61.117.183
    84.61.138.252
    84.72.104.77
    84.73.12.12
    84.73.180.96
    85.10.194.117
    85.10.210.46
    85.10.240.250
    85.10.241.166
    85.119.156.237
    85.15.185.38
    85.176.222.156
    85.176.65.55
    85.178.235.61
    85.178.53.250
    85.214.29.61
    85.214.44.126
    85.225.170.177
    85.25.130.195
    85.25.66.203
    85.25.66.207
    85.31.186.61
    85.57.130.50
    85.76.189.225
    85.76.77.6
    85.77.12.12
    85.8.136.101
    85.84.204.128
    85.90.138.251
    86.56.26.161
    86.59.21.38
    87.123.108.23
    87.123.119.108
    87.123.37.254
    87.3.84.56
    87.89.99.153
    88.134.98.136
    88.198.0.177
    88.72.36.152
    88.96.65.45
  • so right now it looks like there is no possibility to block the tor system. i gonna lock down the desktops via gpls to prevend installations of tor or starting the software froma stick. 
    i will switch the dhcp to assume adresses only to known clients and block unused ips(to be shure that no private pc is inside my network). 
    there are three "main" tor servers, i will block them. (thx@mech9122: i found this hint in youre link). 

    @rcochran, this looks like most of the ips listed here i will try this, thx.

    i know, best way is to lock down the system and make shure that the users have no privileges to install software. iam after this. but i cant realize this in a short time.
  • bad news, found an other software, it runs from an usb stick without installing anything. i have tried all the things you told me but nothing helped. so i switched of the internetconnection. will be a hard klesson for my users.... and some long nights for me
  • which software? name? link? ressources?