IPLIST : "Peerguardian Linux" - Must have for p2p!

jengelh · July 13, 2008, 9:01pm

Now someone tell me why I need iplist when we have ipset.

famewolf · July 14, 2008, 1:04am

Lets see…where to start… ipset doesn’t have a gui. It doesn’t allow for auto downloading updated lists. It requires you to manually setup all the allowed/disallowed ports. Tell you what, why don’t you tell me what you think ipset does better and easier?

farcusnz · July 14, 2008, 6:10am

Be nice to get this one up and running on opensuse

A new moblock GUI - Phoenix Labs

jengelh · July 14, 2008, 9:09am

I do not need no GUIs, and once setup it does its job. It is in-kernel instead of being userspace-queue based, and hence faster with less delay.

famewolf · July 14, 2008, 1:22pm

Ok…I’ll make one final comment in reply because this is straying into soapbox territory. I could setup ipset easy enough. I could write a shell script and put it in cron.daily to download the at last count 290000+ ipranges currently being used by ipblock, concat the multiple files together and then format them into something ipset could load (they won’t work as is because you need to give ipset the allowed and/or disallowed ports) and editing the .conf file via nano is just as easy as using the gui…but the simple fact is the average user prefers an easy install that works and iplist fits the bill.

Your comment regarding getting out of userspace is intriguing but somewhat subjective as I see no slowdown whatsoever using ipblock with the ranges specified. In the end it comes down to personal choice and if ipset does what you personally prefer…use it…but “we” prefer alternatives.

douglascaixeta · November 19, 2008, 8:17pm

Hi famewolf,

First of all thanks for the great job! This is exactly what I was looking for, and I didn’t find something simple and useful like this.

I want to share my experience of installing in openSuse 11.

The rmp packages of the links in the first post doesn’t work for me. I had to download in Webpin.
Than I searched for libnetfilter_queue and libnfnetlink.
For libnetfilter_queue there are 2 kinds of package (and they have the same name and same version!).
We have to install the one that says: “Userspace library for queued iptables packets”.

Than I downloaded iplist-0.19-0.suse.i586.rpm and it works perfectly.

Just one question: do I have to start the ipblock every time or when I restart the computer he will starts automatically?
And how can I test if its really working?

Thanks in advance for the support.

G0NZ0 · November 20, 2008, 1:50am

douglascaixeta, this past post, up in this same thread, should answer your question

famewolf:

It does run automatically at bootup. Once ipblock has been copied to /etc/rc.d (which happens the first time you run ipblock) that gets ran on each bootup and the very top of it checks if it should autostart:
case "$AUTOSTART" in
[Nn]*|"")
        exit 0
        ;;
esac
You can check if it’s running by doing a “ps aux | grep ipblock” and you should see this:

root 4270 0.0 1.8 59620 37508 ? S<l Jul11 0:06 iplist --daemon -q -f /var/log/ipblock.log -l match

Did you check under system runlevels to make sure ipblock is enabled for your runlevel? You do not need to run the gui AT ALL if you don’t want to and you certainly don’t need to run it each time to start ipblock…the gui’s ONLY purpose is to do config changes and even those can be done by editing the .conf file manually from command line.

douglascaixeta · November 21, 2008, 12:00am

Thanks for the reply.

I did the “ps aux | grep ipblock” command and seems to be working properly.

But I’m not sure if its start automatically when I restart, because I restarted and than I opened the gui and says that IPBlock was disable. So I just press the Enable button.

And I checked the /etc/rc.d directory, and ipblock is there!

Anyway, I don’t mind to open the program every restart. At least I will remember to update the lists.

G0NZ0 · November 23, 2008, 7:00pm

douglascaixeta, mine is the same, in the GUI it would appear to be off but i think the GUI ipblock adds some more feature but the basic program can run without GUI and without the additional features (such as logging)
In fact, if you check the logging feature, it is turned on only if you type ipblock -s or if you start from console, otherwise it is not logging anything, even if you can see that ipblock process is running.

This is unfortunate because, since it is not logging anything at all, you never know if it is really working or not. It might be that it remains idle and is not really blocking anything (??). Its hard to know, and the documentation on the web site is not clear either.

Anyway even if you type as a root ipblock -s (-s stands for start) and then ipblock -g (the GUI) you can still see that it appears like it is disabled. Guess its sort of a bug in the program.
The only thing i hope is that, when you startup and do not explicitly type ipblock -s, it is still blocking even if it is “silent” and not logging anything

coolpcguy · November 24, 2008, 5:19am

[OT]
While fiddling with KTorrent, I found that KTorrent can use PeerGuardian filter rule. Just goto Configure KTorrent -> Plugins. Enable IP Filter. Goto IP Filter, put a checkmark against use PeerGuardian filter rule, Click Apply, done![/OT]

uljanow · November 24, 2008, 5:57am

There is an even easier way of getting iplist iplist.sf.net by adding the repo to yast2 and installing the latest version (0.24). But all the manually installed packages iplist, libnfnetlink, libnetfilter_queue should be removed first.

gbj13 · January 27, 2009, 9:32am

Has anyone any ideas where to find rpm’s for iplist-0.24? I am running into problems making ipblok start automatically on opensuse 11.1 and this bug should be fixed in 0.24. However I can only find 0.19 packages on the net

G0NZ0 · January 28, 2009, 8:45pm

here
Index of /repositories/home:/uljanow
(choose the subdir according to your system)

EDIT: i think for 11.1 its not been developed yet, the only ones you can find are here http://download.opensuse.org/repositories/home:/uljanow/openSUSE_11.0/ maybe you could try to see if it works for 11.1 too

tusharjoshi · January 29, 2009, 12:50am

[quote=G0NZ0;1935182]here
Index of /repositories/home:/uljanow
(choose the subdir according to your system)

I installed the Lib files from the 11.1 folder and iplist from 11.0 folder.
works without any issue.

Cheers

brunomcl · January 29, 2009, 7:31am

coolpcguy, what is the file you download and convert? In ktorrent 2.2.7 the IP filter list selection box points to
http://www.bluetack.co.uk/config/splist.zip which gives me a bad file error during conversion.

Thanks,

Update: It worked if I download and extract the text file manually. However the files seem to be old, from 2006. Also, there is a number of different files (emule, spiders, banking), but none specific to torrents. What file apply, the p2p?

Thanks again

uljanow · January 29, 2009, 11:48am

I fixed the build issues. iplist and the required libs are now available for OpenSuse 11.1 .

DigitalCore · March 29, 2009, 8:03am

Thank you for this. Works great!

k3ntegra · April 9, 2009, 4:04am

So what am i supposed to do once i have installed the files from the repository? btw i’m using ktorrent as my default bittorrent program.

k3ntegra · April 25, 2009, 9:12pm

Anyone know what files i am supposed to install once the uljanow repository has been added?

k3ntegra · April 25, 2009, 9:33pm

I installed iplist from the repository and it installed libnetlink and libnetfilter along as well. I checked /usr/sbin and the necessary file are there. When i click ipblocker from the Kapplication Launcher, nothing happens, even when i restart the computer…