Remote Blacklists

[fpietrosanti]

When the number of tor2web networks and sites will grow, it will be an issue to handle sharing and alignments related to blacklists.

While each node would be able to handle it's own blacklist, it maybe desirable for one administrator of multiple tor2web nodes, to centralize the handling of blacklists.

In that case a basic feature of:

• Remotely exposing over a web page the list of blacklisted host/url
• Remotely importing blacklists over a specific URL

would allow easier maintenance and handling of blacklists required to keep tor2web network running without main issues.

[fpietrosanti]

Ahmia.fi kindly provide us a list of their blocked index sites, so when we will have such a feature implemented, it would be possible to use them as one of the remote source of blocklist.

Thanks numes

Ahmia blocklist https://ahmia.fi/bannedMD5.txt

[evilaliv3]

@fpietrosanti the feature exists but has not been documented for a lot of security concerns related.

you have changed opinion? if that i'll be very happy to enable it

[evilaliv3]

implemented: 8a23a03

(it was already implemented but not configurable)

now the tor2web.conf.example contains the following commented lines:

The following configurations parametes permits to enable automatic fetching of blocklists

automatic_blocklist_updates_source = https://ahmia.fi/bannedMD5.txt

automatic_blocklist_updates_refresh = 600

[fpietrosanti]

Missing documentation to the wiki

[evilaliv3]

https://github.com/globaleaks/Tor2web-3.0/wiki/Configuring-Tor2web