I&#x27;m sure the Tor network can&#x27;t be used to seriously DDoS CF. So the abuse of which you are talking about must be just the spam (can be unpleasant for your clients but safe for CF) and the anonymous hacking attempts (again unpleasant for the clients but safe for CF).<p>My solution would be to not block Tor by default, instead let your clients do that if and only if they want to block it. Or, at least, let them make an informed decision when setting up the account instead of a default choice.