https://www.christian-knedel.de/ja/tags/hacker/ Recent content in hacker on Christian Knedel Hugo -- gohugo.io ja-jp Fri, 14 Feb 2020 00:00:00 +0000 https://www.christian-knedel.de/ja/post/2020/february/20200214-nginx-tor/ Fri, 14 Feb 2020 00:00:00 +0000 https://www.christian-knedel.de/ja/post/2020/february/20200214-nginx-tor/ 私のダークネットブロッカーには、Tor exit node IO listと以下のルールが必要なだけです。 location / { limit_req zone=one; #request limit limit_conn addr include /etc/nginx/conf.d/tor-ips.conf; #tor ips blocken ... } 以下のスクリプトで、IPブラックリストを作成することができます。 IPアップデートスクリプト #!/bin/sh # Copyright 2012, Nico R. Wohlgemuth <nico@lifeisabug.com> WGET=/usr/bin/wget LIST=/etc/nginx/conf.d/tor-ips.conf #ziel der blacklist LISTBAK=/etc/nginx/conf.d/tor-ips.bak TEMPLIST=/tmp/torlist.txt wget -qO- https://check.torproject.org/exit-addresses | grep ExitAddress | cut -d ' ' -f 2 | sed "s/^/deny /g; s/$/;/g" > $TEMPLIST if [ ! -s $TMPTEMPLIST ]; then echo "error: list is empty or was not downloaded" exit 1 fi head -n3 $TEMPLIST tail -n3 $TEMPLIST echo -e "\ndoes this look okay?