Difference between revisions of "IPFilter"

From AMule Project FAQ
Jump to: navigation, search
Line 1: Line 1:
 
== Description ==
 
== Description ==
  
The [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] Filter blocks traffic from/to IPs and ranges of [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s with our [[client]]. This means that those [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s which get blocked will not be able neither to upload to us nor to download from us.
+
The [[IP]] Filter blocks traffic from/to IPs and ranges of [[IP]]s with our [[client]]. This means that those [[IP]]s which get blocked will not be able neither to upload to us nor to download from us.
  
This filter is read from ''~/.aMule/ipfilter.dat'' which is a file which's contents describes the valid and blocked [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] ranges.
+
This filter is read from [[ipfilter.dat_file|''~/.aMule/ipfilter.dat'']] which is a file which's contents describes the valid and blocked [[IP]] ranges.
  
== ipfilter.dat format ==
+
== [[ipfilter.dat file]] ==
  
The format of the ''ipfilter.dat'' file is as follows:
+
The information and details about the [[ipfilter.dat file]] can be found [[ipfilter.dat file|here]].
  
'''[http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s range , Access level , Description'''
+
== Using the [[IP]] Filter in [[aMule]] ==
  
''Access level'' values '''lower than 127 are blocked [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s''' and values '''over 127 are permitted [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s'''.
+
The ''Access level'' of the [[IP]] filter is selected in [[aMule]] through "Preferences" -> "Security" -> "IP Filtering" -> "Filtering level" (in [[aMule]] versions up to 2.0.0-rc8 it is under "Server", instead of "Security").
  
''[http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s range'' values are described by an initial [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] a slash and the ending [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] of tha range (the slash must be separated from the [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP]s by a single space character).
+
'''NOTE:''' [[aMule]]'s ''ipfilter.dat'' file is 100% compatible with [[eMule]]'s ([[eMule]]'s [http://www.methlabs.org/methlabs.htm PeerGuardian] format, which is the most popular. The ''antip2p.txt'' format isn't yet supported).
  
== Using the [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] Filter in [[aMule]] ==
+
== [[IP]] Filter sources ==
  
The ''Access level'' of the [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] filter is selected in [[aMule]] through Preferences -> Security -> IP Filtering -> Filtering level.
+
http://ciberia.ya.com/Mc4TuTi/ipfilter.dat
  
'''NOTE:''' [[aMule]]'s ''ipfilter.dat'' file is 100% compatible with [[eMule]]'s ([[eMule]]'s [http://www.methlabs.org/methlabs.htm PeerGuardian] format, which is the most popular. The ''antip2p.txt'' format isn't yet supported).
 
 
== [http://www.erg.abdn.ac.uk/users/gorry/course/inet-pages/ip.html IP] Filter sources ==
 
http://ciberia.ya.com/Mc4TuTi/ipfilter.dat<br>
 
 
http://ciberia.ya.com/Mc4TuTi/2/ipfilter.dat
 
http://ciberia.ya.com/Mc4TuTi/2/ipfilter.dat
  
 +
== Hard coded [[IP]] filter in [[aMule]] ==
  
== Hard coded [http://www.faqs.org/rfcs/rfc791.html IP] filter in [[aMule]] ==
+
[[aMule]] has a range of [[IP]]s which it filters by default following the [http://www.rfc-editor.org/rfc/rfc3330.txt RFC 3330] document. This ranges are:
 
+
[[aMule]] has a range of [http://www.faqs.org/rfcs/rfc791.html IP]s which it filters by default following the [http://www.rfc-editor.org/rfc/rfc3330.txt RFC 3330] document. This ranges are:
+
  
 
<pre>
 
<pre>

Revision as of 17:01, 9 December 2004

Description

The IP Filter blocks traffic from/to IPs and ranges of IPs with our client. This means that those IPs which get blocked will not be able neither to upload to us nor to download from us.

This filter is read from ~/.aMule/ipfilter.dat which is a file which's contents describes the valid and blocked IP ranges.

ipfilter.dat file

The information and details about the ipfilter.dat file can be found here.

Using the IP Filter in aMule

The Access level of the IP filter is selected in aMule through "Preferences" -> "Security" -> "IP Filtering" -> "Filtering level" (in aMule versions up to 2.0.0-rc8 it is under "Server", instead of "Security").

NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format, which is the most popular. The antip2p.txt format isn't yet supported).

IP Filter sources

http://ciberia.ya.com/Mc4TuTi/ipfilter.dat

http://ciberia.ya.com/Mc4TuTi/2/ipfilter.dat

Hard coded IP filter in aMule

aMule has a range of IPs which it filters by default following the RFC 3330 document. This ranges are:

        Address Block             Present Use                       Reference
        ----------------------------------------------------------------------
        "0.0.0.0/8",       // "This" Network                 [RFC1700, page 4]
        "10.0.0.0/8",      // Private-Use Networks                   [RFC1918]
        "14.0.0.0/8",      // Public-Data Networks         [RFC1700, page 181]
        "24.0.0.0/8",      // Cable Television Networks                    --
        "39.0.0.0/8",      // Reserved but subject
                           //    to allocation                       [RFC1797]
        "127.0.0.0/8",     // Loopback                       [RFC1700, page 5]
        "128.0.0.0/16",    // Reserved but subject
                           //    to allocation                             --
        "169.254.0.0/16",  // Link Local                                   --
        "172.16.0.0/12",   // Private-Use Networks                   [RFC1918]
        "191.255.0.0/16",  // Reserved but subject
                           //    to allocation                             --
        "192.0.0.0/24",    // Reserved but subject
                           //    to allocation                             --
        "192.0.2.0/24",    // Test-Net
        "192.88.99.0/24",  // 6to4 Relay Anycast                     [RFC3068]
        "192.168.0.0/16",  // Private-Use Networks                   [RFC1918]
        "198.18.0.0/15",   // Network Interconnect
                           //    Device Benchmark Testing            [RFC2544]
        "223.255.255.0/24",// Reserved but subject
                           //    to allocation                             --
        "224.0.0.0/4",     // Multicast                              [RFC3171]
        "240.0.0.0/4"      // Reserved for Future Use        [RFC1700, page 4]

However, you can un-filter this range of IPs by unchecking "Preferences"->"Security"->"IP-filtering"->"Always filter bad IPs" (on aMule versions up to 2.0.0-rc8, this option can be found in "Preferences"->"Server"->"Always filter bad IPs").