How EDL Tor Exit IP Addresses is updated?

[Carracido]

Hello,

I have noticed the EDL Tor Exit IP Addresses includes only over 1200 entries and the total list of exit nodes is over 12000:

https://www.dan.me.uk/tornodes

I was wondering based on what criterion Palo Alto is updating the EDL. Does anyone know this? Just because the EDL doesn´t reflect not even near the total number of IPs.

Thank you!

[Claw4609]

Hello,

On that page you linked, are you then going to the TOR exit node list thats linked towards the top? It looks like that list is only a few thousand, and if you remove the IPv6 IPs it looks liek the list of IPv4 addresses is pretty comparable, however is does still look like Palo has about 150 less in their list.

[OtakarKlier]

Hello,

I would also recommend blocking by applications. For me I place a deny all policy at the bottom and only allow the applications I want, so if tor is not listed, it wont be allowed regardless if its in a list of not.

Regards,

[JackeyPerry]

Thank you so much for the suggestion.