I've said it before, I'll say it again: Blocking #Tor exit nodes is nonsensical. Only noobs will attack you through tor, pros have botnets. Blocking botnets is unfeasible, unless you're willing to block each and every major ISP on the planet. People who don't get this simple fact about the internet shouldn't be in charge of anything security related.

</rant>