rack-tor-block 0.0.1

data/lib/rack-tor-block.rb

@@ -0,0 +1 @@
+require "rack/tor_block"

data/lib/rack/ip.rb

@@ -0,0 +1,34 @@
+require 'resolv'
+
+module Rack
+  class IP
+    
+    TOR_POSITIVE_IP = '127.0.0.2' #In case the DNS look up is positive, this is the IP address returned
+    TOR_DNSEL = 'ip-port.exitlist.torproject.org' #https://www.torproject.org/projects/tordnsel.html.en
+    
+    GOOGLE_DNS_ADDR = '8.8.8.8'
+    GOOGLE_DNS_PORT = '53'
+    
+    # client_addr is the address of the remote client we want to test to be an TOR node
+    # server_addr is the address of a public IP server we want to reach passing through client_addr
+    # server_port is a TCP port running on server_addr to test for positiviness to TOR network
+    def initialize(client_addr, server_addr = GOOGLE_DNS_ADDR, server_port=GOOGLE_DNS_PORT)
+      @client_addr, @server_port, @server_addr = client_addr.to_s, server_port.to_s, server_addr.to_s
+    end
+    
+    def is_tor? #Implements https://www.torproject.org/projects/tordnsel.html.en
+      Resolv.getaddress(tor_hostname) == TOR_POSITIVE_IP
+    rescue Resolv::ResolvError => e
+      false
+    end
+    
+    def tor_hostname
+      [reverse_ip_octets(@client_addr), @server_port, reverse_ip_octets(@server_addr), TOR_DNSEL].join('.')
+    end
+
+    def reverse_ip_octets(ip)
+      ip.split('.').reverse.join('.')
+    end
+    
+  end
+end

data/lib/rack/tor_block.rb

@@ -0,0 +1,20 @@
+require 'rack'
+require 'rack/ip'
+
+module Rack
+  class TorBlock
+    
+    DEFAULT_REDIRECT = 'https://sorry.google.com' #We're sorry from Google
+
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      return [302, {'Content-Type' => 'text', 'Location' => DEFAULT_REDIRECT}, [] ] if Rack::IP.new(env['REMOTE_ADDR']).is_tor?
+        
+      #Normal processing
+      @app.call(env)
+    end
+  end
+end

metadata

@@ -0,0 +1,86 @@
+--- !ruby/object:Gem::Specification
+name: rack-tor-block
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Luca Bonmassar
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-10-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>'
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>'
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Identify and prevent tor users to access a Rack / Rails application.
+email:
+- luca@gild.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/rack-tor-block.rb
+- lib/rack/ip.rb
+- lib/rack/tor_block.rb
+homepage: http://www.gild.com
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
+      - 0
+      hash: -3304184217374256655
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
+      - 0
+      hash: -3304184217374256655
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: Prevent tor users to access a Racl / Rails application.
+test_files: []