Extension:TorBlock

MediaWiki extensions manual

TorBlock Release status: stable
Implementation	User access
Description	Automatically applies restrictions to Tor exit nodes with access to the wiki's front-door server.
Author(s)	Andrew Garrett (Werdnatalk)
Latest version	1.1.0 (Continuous updates)
MediaWiki	1.35+
PHP	5.5+
License	GNU General Public License 2.0 or later
Download	Download extension Git [?]: Download Git master browse repository (GitHub) commit history repository contributors (GitHub) code review
Parameters $wgTorBlockProxy $wgTorIPs $wgTorProjectCA $wgTorOnionooServer $wgTorTagChanges $wgTorAutoConfirmCount $wgTorDisableAdminBlocks $wgTorBypassPermissions $wgTorAllowedActions $wgTorOnionooCA $wgTorAutoConfirmAge
Added rights torunblocked
Hooks used AbortAutoblock AbuseFilter-builder AbuseFilterAlterVariables AutopromoteCondition ChangeTagsListActive EmailUserPermissionsErrors GetAutoPromoteGroups GetUserBlock ListDefinedTags OtherBlockLogLink RecentChange_save getUserPermissionsErrorsExpensive
Hooks provided TorBlockBlockedMsg
Translate the TorBlock extension if it is available at translatewiki.net
Check usage and version matrix.
Issues	Open tasks · Report a bug

The TorBlock extension automatically applies restrictions to Tor exit node's access to the wiki's front-door server.

Installation

• Download and place the file(s) in a directory called TorBlock in your extensions/ folder.
• Add the following code at the bottom of your LocalSettings.php:

  wfLoadExtension( 'TorBlock' );
  

  Configure as required.
•  Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.

To users running MediaWiki 1.24 or earlier:

The instructions above describe the new way of installing this extension using wfLoadExtension(). If you need to install this extension on these earlier versions (MediaWiki 1.24 and earlier), instead of wfLoadExtension( 'TorBlock' );, you need to use:

require_once "$IP/extensions/TorBlock/TorBlock.php";

Configuration

$wgTorBypassPermissions = [ 'torunblocked' ];	User account permissions that bypass Tor blocks. By default, $wgGroupPermissions['user']['torunblocked'] = true; is set, so logged-in users will bypass permissions unless it is set to false.
$wgTorLoadNodes = true;	If set to true, the extension will always try to load a list of nodes if there is no current list available in the cache. Loading the exit node list is expensive, so some wikis may want to set this to false, and instead have loadExitNodes.php be run as a cron job to update the node list.
$wgTorIPs = [ '208.80.152.2' ];	An array of IP addresses that the wiki server uses. Only exit nodes allowed to connect to these IPs will be returned in the internal list. Note: this is only used when the extension has to fall back to the Tor Project's bulk list service, rather than using the newer Onionoo protocol.
$wgTorDisableAdminBlocks = true;	Disables existing Tor blocks made by admins.
$wgTorAutoConfirmAge = 0; $wgTorAutoConfirmCount = 0;	Like Manual:$wgAutoConfirmAge and $wgAutoConfirmCount . Both sets of limits must be passed for an account to be granted any statuses defined in Manual:$wgAutopromote (including autoconfirmed status).
$wgTorAllowedActions = [ 'read' ];	Permissions allowed to Tor anonymous users. By default, Tor users cannot create accounts.
$wgTorOnionooServer = 'https://onionoo.torproject.org'; $wgTorOnionooCA = "$dir/torproject.crt"; $wgTorProjectCA = "$dir/torproject.crt";	By default, the extension uses a service called Onionoo, created by the Tor Project, to retrieve the list of exit nodes. Onionoo servers can be run by anybody, so a custom one (and its associated SSL certificate) can be set with these variables. The default is the Tor Project's own server.
$wgTorTagChanges = true;	Mark Tor edits as such
$wgTorBlockProxy = false;	Proxy to use, if not the default proxy