[photon]

Originally Posted by Azure

There are a ton of IPs here.

http://proxy.org/tor.shtml

I don't know how often they update it though.

Yeah, and that's just Tor. The VPNs you mentioned work on a totally different idea, and they're all going to have their own set of rules.

And the IPs will change all the time, it'll be a game of whack-a-mole, something to administrate on an ongoing basis.

Originally Posted by Azure

Someone also suggested blocking ports 9001, and 9030 as apparently Tor listens on port 9001, and their directory is on port 9030. Might not completely block it, but it might make it hard to use.

Problem is there are numerous other similar programs.

I think the ports are only used that way if you are setting up a tor relay; actually participating in creating the tor network... while if you just use tor without having those ports open or even blocked, it'll still work to circumvent filtering.

But you could do a combination of removing the low hanging fruit (blocking common TOR IPs, ports, and such) and communicating and instructing the user base.

Parents don't have any problem monitoring what their kids watch on TV and don't call Shaw asking them to block the Fashion TV show for their house, this is the same thing, just a little more complicated.