[emzc]

Because he asked for connection too often. It's not the effect of ipfilter, it's eMule normal behavior if a client ask more than 2 or 3 in ten minutes.

[STA]

emzc, on Jul 22 2003, 10:37 PM, said:

Because he asked for connection too often. It's not the effect of ipfilter, it's eMule normal behavior if a client ask more than 2 or 3 in ten minutes.

I guess this guy was using a customized client since the frequency of connection is not a customizable setting in the official emule client is it?

[MadamEve]

Does eMule 0.29c incompletely process the ipfilter.dat?

I have just downloaded the ipfilter.dat Version 1.40 from http://cvs.suche.org...s.php/ip.prefix and that file contains 2082 lines with IP-ranges, no blank lines or comments.

When I load that file to eMule 0.29c, it says "2000 IP Filter geladen" (translate to english: "2000 IP filter loaded"). But there where 2082 lines in the ipfilter.dat, not only 2000! Has eMule reached some hard-limit of max. lines in ipfilter.dat?

If so, it should at least warn the user that some ranges in ipfilter.dat are not loaded and the user is less protected than he thinks he is! Or is there another explanation?

[cimaRRon]

MadamEve, on Jul 23 2003, 09:02 AM, said:

When I load that file to eMule 0.29c, it says "2000 IP Filter geladen" (translate to english: "2000 IP filter loaded"). But there where 2082 lines in the ipfilter.dat, not only 2000! Has eMule reached some hard-limit of max. lines in ipfilter.dat?

If so, it should at least warn the user that some ranges in ipfilter.dat are not loaded and the user is less protected than he thinks he is! Or is there another explanation?

That's exactly what I was asking myself, what about those extra 82 lines ?
Maybe there are some (82!) overlapping ip's which eMule doesn't count? I don't know really..

[emzc]

I don't think there's such a limit in ipfilter.dat, since my list is 2443 and eMule says correctly "2443 IP Filter loaded".
Maybe some lines in your files are the same, so they are not counted ?

[xMule]

I agree with many of the posts of this thread that IPfilter.dat is very dangerous for the community because MANY blocked IPs are DYNAMIC IPs from European ISPs.

What I condemn is the overly-spread infamous "cDonkey's Blocklist" (http://cvs.suche.org/horde/chora/cvs.php/ip.prefix).

And, in the first place, who is the unaware person in charge of that list?!?!?

1 blocked IP out of 3 is from the French ISP "Wanadoo.fr" (MY ISP !!!) And this ISP offers DYNAMIC IPs, which means that a completely innocent user may be blocked because he's using an IP that was ONCE used by someone who would have possibly needed to be blocked. But that person has changed his/her IP anyway so it's useless and unfair to block that IP.

If you're using that list (especially if you program mods and want to include it into your release), please remove all Wanadoo.fr blocked IPs from your IPfilter.dat file, because they do not have to be blocked!

This post has been edited by xMule: 28 July 2003 - 11:28 AM

[josuoxxi]

213.098.000.000 - 213.098.180.255 , 255 , uc.nombres.ttd.es

My static IP is blocked... In this range there´s many spanish adsl lines. Please, remove this line.

I think there should be more control over ipfilter use, it is hurting many people.

Thanks.

[emzc]

255 indicates that with default ip flitering level, this range is NOT filtered. If you haven't red the first post of this thread (which is highly probable), then you should read it now, to avoid non-sense posting.

[josuoxxi]

emzc, on Jul 31 2003, 12:07 PM, said:

255 indicates that with default ip flitering level, this range is NOT filtered. If you haven't red the first post of this thread (which is highly probable), then you should read it now, to avoid non-sense posting.

I have red it again, but I dont get very well the part where is says there are two ranges: 0-126 127-255.

213.098.000.000 - 213.098.180.255 , 255 , uc.nombres.ttd.es

If my ip is 213.098.157.51, is it blokcked or not?
If 255 means that the range is not blocked, what is the meaning for having this range in the ipfilter.dat?

Sorry, but its a bit confusing...

[NRJ]

how do you find out a user Ip address? I have a firewall.

[clam]

something you might find interesting.

I received a note from my netadmintoday today .
They got a mail from baytsp, (working from paramount..) that had identified 3 IPs (among them mine) that were moving illegal files (movies and the like), and they're asking the local network to take measures against us.

So no more emule for me at least for the foresable future.
The funny thing is I had a rather extensive ipfilter.dat list that was blocking (i studied the logs) a LOT of scanners from the headhunter companies.

So ..while usefull .... it seems there are some wholes , big enough so they can get to you. Be warned.

the REALLY strange thing is that from 6 people in the office using emule, I'm the only one using ipfilter.dat and firewall to block said IPs and I'm the only only who got busted.
Any ideas???

This post has been edited by clam: 02 October 2003 - 12:22 PM

[Hetfield]

that ipfilter (i mena cdonkey) has not been updated for months.

any other?

[Mc4TuTi]

Hi,

A new spanish web : www.iespana.es/IPFILTER/index.htm

Update : 05/11 ---> "Descargar IPFILTER"

Thx

This post has been edited by Mc4TuTi: 08 November 2003 - 06:46 AM

[wmosner]

I have entered an IP address in the IPfilter.dat, restarted eMule v0.30b and keep receiving data from the IP address that I thought I had blocked. I believe it is some sort of hacked IP because the data comes much faster than from normal downloaders and they show eDonkey v1.0, 2.0, etc. which I don't think are legitimate versions.

this is the entry in IPfiler.dat

193.111.198.137 - 193.111.198.137 , 100 , 193.111.198.137

does it look like I am entering it correctly or is it just not working?


Thanks for any help,

bill

[amigo007]

hi

as wmosner wrote, the ipfilter seems not to work anymore. so perhaps someone could verify this !!!

here are examples of two small ip filters which both should filter every client.

WORKING :
000.000.000.000-255.255.255.255 , 000 , WW
every IP is filtered

NON WORKING :
000.000.000.000-255.255.255.255 , 000 , WW
000.000.000.000-000.255.255.255 , 100 , IP PREFIX v1.41----LOW_ID (invalid)
NO IP is filtered !

i would be really intrested if somebody could test it .... or could explain what is the reason for the 2.example not to work.
it seems to be caused by overlapping and since all ipfilters do overlap...

so pleaze someone else check this out !

CU aMiGo

[Sled_Dog]

NM, figured it out.
Thanks

This post has been edited by Sled_Dog: 02 December 2003 - 06:32 AM

[seraphielx]

ok peeps if you do not like the cdonkey list why not try the peerguardian list?

im the one working with the database now and we are working to make sure that no real user is blocked in the database,as we have an invalid ip forum set up so that this will not happen again.

also i have a few questions about the emule log and what a few things mean in it,is there a guide as to what some of it is actually meaning?

you can get to the converter for the peerguardian list at http://bluetack.co.uk and you can get the list that i update day in and day out at http://peerguardian.net

[THCz]

Anybody know where i can download such a list ? B/c i tried makin it up using the example in the forum , it did work but i was usig the IP addresses from peerguardian and the list is long, very long.

[pash91]

I use peerguardian and find that it uses a lot of resources. I usually can't even scroll down to see who I blocked. I'm wondering if the IP filter in emule is as good as the one in Peerguardian if I keep it updated with the same list. It would be great if someone would tell me. Thanks in advance

This post has been edited by pash91: 29 January 2004 - 10:56 PM