Difference between revisions of "Talk:IPFilter"

From AMule Project FAQ
Jump to: navigation, search
m (Reverted edit of 85.74.46.121, changed back to last version by Jacobo221)
Line 38: Line 38:
  
 
'''Greets!'''
 
'''Greets!'''
 +
 +
Well, aMule supports the PeerGuardian lists (only version 1).
 +
So I added their source (blocklist.org) to ''IP Filter sources''. But I'm not sure what ''IP Filter sources'' is intended to list:<br>
 +
only web-addresses from which you can automatically update the ipfilter.dat (you can't do this with blocklist.org) or also web-addresses that have lists that you can manually insert (you can do this with blocklist.org).<br>
 +
See also [http://forum.amule.org/thread.php?threadid=7389&sid= this thread]<br>
 +
<br>
 +
Also see that the log message in 2.0.3 is slightly inaccurate, but the actual behavior is what you would want/expect. It is always ranges that are filtered, not individual IP addresses.
 +
 +
Greetings and Thanks
 +
jere (I can't login for the wikis, but in the forum I can)

Revision as of 13:47, 16 September 2005

1)The Peerguardian antip2p filter (http://www.methlabs.org/sync/) is much bigger than the given ipfilter.dat (almost 7000 lines bigger).
Which one is the most uptodate? (I can actually guess that!) Up to date? hard to know. probably both are more or less the same. But loafing a large ipfilter requieres quite some CPU/MEM usage and might not be really a good idea in some environments, depending on what it is actually filtering.

2)Two filtering levels are defined, one in the ipfilter.dat file and another in preferences->security->ip-filter-filtering level.
Which one applies?
No idea, sorry. Ask Phoenix at forums or at aMule's IRC channel.I guess the one at preferences is the one used unless the file already assiges one (AFAIK, there's no way to have a file to hard-set a security number, but if you say it does...).
Why are there so many filtering levels (0,1,...127,128,...)???
There are so many so that you can decide what to filter and what to not filter without having to re-edit the whole file. Just changing the security value in Preferences.

Greetings!


I have a question to this:

NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format, which is the most popular. The antip2p.txt format isn't yet supported).

Question: On blocklist.org, where you can download PeerGuardian blocklists, there are 3 versions available. Is aMule's ipfilter.dat compatible to all versions? I'd like to use a customized Version1 list (PeerGuardian plain text).

I have really no idea at all. Please test and report what you find out :)

Well, depends on the version (the original list contains 83990 ranges and 2344303895 IPs):
2.0.3 (dude's Debian stable package) tells me about 83000 IPs are filtered
CVS (20050913) (vollstrecker's Debian package) tells me 83979 ranges are filtered (11 malformed lines were discarded).
So i'm unsure just about the stable (2.0.3) version. Are the whole ranges blocked or just the first IP of each range?
One example line from my ipfilter_static.dat:
Bogon:0.0.0.1-2.255.255.255
While the wiki/index.php/Ipfilter.dat_file gives me:
IPs range values are described by an initial IP a dash and the ending IP of tha range (the dash must be separated from the IPs by a single space character).
000.000.000.000 - 000.255.255.255 , 000 , "This" Network [RFC1700, page 4]

Non valid IPs are discarded. Also, if a line discribes a range in a nonvalid way, not only the first IP will be discarded, but the whole range, since aMule won't be able to understand its meaning.

I'm not sure if I understood what you were saying, but I hope I did ;)

You could ask at http://forum.amule.org if you wish, since gonosztopi is checking forums there and he's the one who wrote the IPFilter code. If you get to some conclusion... please report here :)

Greets!

Well, aMule supports the PeerGuardian lists (only version 1). So I added their source (blocklist.org) to IP Filter sources. But I'm not sure what IP Filter sources is intended to list:
only web-addresses from which you can automatically update the ipfilter.dat (you can't do this with blocklist.org) or also web-addresses that have lists that you can manually insert (you can do this with blocklist.org).
See also this thread

Also see that the log message in 2.0.3 is slightly inaccurate, but the actual behavior is what you would want/expect. It is always ranges that are filtered, not individual IP addresses.

Greetings and Thanks jere (I can't login for the wikis, but in the forum I can)