matomo-org / matomo-org/plugin-TrackingSpamPrevention

Add option to block TOR exit relays

Open
#11 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
18
Forks
10
Avg merge
20h 11m
Merged PRs (30d)
1

Description

Some customers may wish to block tracking requests from TOR exit nodes, since these can often be used for more nefarious reasons than just normal browsing.

It is important to note that there may exist relays that do not allow TOR exits from that relay, but are only used to pass traffic within the TOR network, we would preferably only want to have the option to block exit node IPs from being tracked.

There exists this GitHub repo which has a list of IPs: https://github.com/SecOps-Institute/Tor-IP-Addresses
As well as this website https://www.dan.me.uk/tornodes
Which provides an exit node IP list: https://www.dan.me.uk/torlist/?exit

There may be other methods of gathering TOR exit node IPs.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the plugin's tracking-request handling and the referenced Tor exit-node IP sources. Define how the option obtains and refreshes exit-node addresses while excluding non-exit relays; done means customers can enable blocking of Tor exit-node tracking requests without blocking other Tor traffic.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.