Re: [tor-relays] suspicious "Relay127001" relays

simon:

If I understood the documentation correctly, as a node operator I can't blacklist hosts individually (unless I'm putting them into MyFamily, which I don't want to).

AFAIK, there is no option in tor itself to exclude relays from the routing.

But you're still able to restrict connections with these nodes using plain blocking at your firewall. So circuits through these relays are not able to be built anymore. [Note also, that it makes performance poorer compared to the case when it's defined by policy].

In case of PF it looks like:

{{{ table <bad-onions> { 0.0.0.0 }

block in quick on egress from <bad-onions> to any block out quick on egress from any to <bad-onions> }}}

-- Ivan Markin