https://www.christian-knedel.de/fi/tags/security/ Recent content in security on Christian Knedel Hugo -- gohugo.io fi-fi Fri, 14 Feb 2020 00:00:00 +0000 https://www.christian-knedel.de/fi/post/2020/february/20200214-nginx-tor/ Fri, 14 Feb 2020 00:00:00 +0000 https://www.christian-knedel.de/fi/post/2020/february/20200214-nginx-tor/ Tarvitsen darknet-estoani varten vain Tor exit node IO -luettelon ja seuraavan säännön: location / { limit_req zone=one; #request limit limit_conn addr include /etc/nginx/conf.d/tor-ips.conf; #tor ips blocken ... } Seuraavalla skriptillä voin luoda Ip-mustan listan: IP-päivityksen käsikirjoitus #!/bin/sh # Copyright 2012, Nico R. Wohlgemuth <nico@lifeisabug.com> WGET=/usr/bin/wget LIST=/etc/nginx/conf.d/tor-ips.conf #ziel der blacklist LISTBAK=/etc/nginx/conf.d/tor-ips.bak TEMPLIST=/tmp/torlist.txt wget -qO- https://check.torproject.org/exit-addresses | grep ExitAddress | cut -d ' ' -f 2 | sed "s/^/deny /g; s/$/;/g" > $TEMPLIST if [ !