Extension:TorBlock

Automatically applies restrictions to Tor exit nodes with access to the wiki's front-door server.

Parameters
User account permissions that bypass Tor blocks.
 * $wgTorBypassPermissions = array( 'torunblocked' );

By default,  is set, so logged-in users will bypass permissions unless it is set to false.

Load and cache a list of Tor nodes as necessary if the list is not stored in cache under the key 'mw-tor-exit-nodes'. Despite code comments, APC appears to be usable as cache. loadExitNodes.php can be used in a cron job instead of this.
 * $wgTorLoadNodes = true;

An array of IP addresses that the wiki server uses. Only exit nodes allowed to connect to these IPs will be returned in the internal list.
 * $wgTorIPs = array( '208.80.152.2' );

Disables existing Tor blocks made by admins
 * $wgTorDisableAdminBlocks = true;

Like $wgAutoConfirmAge and $wgAutoConfirmCount. Both sets of limits must be passed for an account to be granted autoconfirmed status.
 * $wgTorAutoConfirmAge = 0;
 * $wgTorAutoConfirmCount = 0;

Permissions allowed to Tor anonymous users. By default, Tor users cannot create accounts.
 * $wgTorAllowedActions = array( 'read' );

NOTE
There have been reports of this module not functioning properly. Its status as stable may need to be updated.

Here it's said that it needs cron, supposedly to update the list of TOR nodes from the external source, but doesn't explains precisely what sort of cron etc.

You need to run loadExitNodes.php regularly (for instance every half hour) to load nodes from an external source and put them in memcache; no reliable source (with regard to uptime) currently exists, but Wikimedia projects as of 2011 use https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=91.198.174.232 (replace ip with the server ip). The script can break if run with the  tag.