AMule Project FAQ - User contributions [en]

IPFilter

2005-09-18T23:43:13Z

85.74.29.70:

== Description ==

The [[IP]] Filter blocks traffic from/to IPs and ranges of [[IP]]s with our [[client]]. This means that those [[IP]]s which get blocked will not be able neither to upload to us nor to download from us.

This filter is read from [[ipfilter.dat_file|''~/.aMule/ipfilter.dat'']] which is a file which's contents describes the valid and blocked [[IP]] ranges.

== [[ipfilter.dat file]] ==

The information and details about the [[ipfilter.dat file]] can be found [[ipfilter.dat file|here]].

== Using the [[IP]] Filter in [[aMule]] ==

The ''Access level'' of the [[IP]] filter is selected in [[aMule]] through "Preferences" -> "Security" -> "IP Filtering" -> "Filtering level" (in [[aMule]] versions up to 2.0.0-rc8 it is under "Server", instead of "Security").

'''NOTE:''' [[aMule]]'s ''ipfilter.dat'' file is 100% compatible with [[eMule]]'s.

== [[IP]] Filter sources ==

=== IP Filter - URLs for Auto-update at startup ===

http://emulepawcio.sourceforge.net/nieuwe_site/Ipfilter_fakes/ipfilter.dat (Last update: 28 August 2005)

http://www.emulext.net/seguridad/Mc4TuTi/ipfilter.dat (Last update: February 2005)

http://www.autistici.org/smokingmath/ipfilter.dat (Only filters [[fake]] [[server]]s. Last update: 8 August 2005)

http://www.bluetack.co.uk/config/ipfilter.dat

=== IP Filter sites - Insert these lists manually or with a script===

'''NOTE:''' Do '''NOT''' use methlabs.org or blocklist.org, they are hijacked and are now '''fake''' sites looking for '''economic profit''' and '''lucration'''!

http://bluetack.co.uk/config/sources.txt (Replacement for ''methlabs.org'' and ''blocklist.org'')

http://emulepawcio.sourceforge.net/nieuwe_site/ipfilter_fake_list.html

http://www.openmedia.info/p27.html (Last update: 12 September 2005)

== Hard coded [[IP]] filter in [[aMule]] ==

[[aMule]] has a range of [[IP]]s which it filters by default following the [http://www.rfc-editor.org/rfc/rfc3330.txt RFC 3330] document. This ranges are:

<pre>
Address Block Present Use Reference
----------------------------------------------------------------------
"0.0.0.0/8", // "This" Network [RFC1700, page 4]
"10.0.0.0/8", // Private-Use Networks [RFC1918]
"14.0.0.0/8", // Public-Data Networks [RFC1700, page 181]
"24.0.0.0/8", // Cable Television Networks --
"39.0.0.0/8", // Reserved but subject
// to allocation [RFC1797]
"127.0.0.0/8", // Loopback [RFC1700, page 5]
"128.0.0.0/16", // Reserved but subject
// to allocation --
"169.254.0.0/16", // Link Local --
"172.16.0.0/12", // Private-Use Networks [RFC1918]
"191.255.0.0/16", // Reserved but subject
// to allocation --
"192.0.0.0/24", // Reserved but subject
// to allocation --
"192.0.2.0/24", // Test-Net
"192.88.99.0/24", // 6to4 Relay Anycast [RFC3068]
"192.168.0.0/16", // Private-Use Networks [RFC1918]
"198.18.0.0/15", // Network Interconnect
// Device Benchmark Testing [RFC2544]
"223.255.255.0/24",// Reserved but subject
// to allocation --
"224.0.0.0/4", // Multicast [RFC3171]
"240.0.0.0/4" // Reserved for Future Use [RFC1700, page 4]
</pre>

However, you can un-filter this range of [http://www.faqs.org/rfcs/rfc791.html IP]s by unchecking "Preferences"->"Security"->"IP-filtering"->"Always filter bad IPs" (on [[aMule]] versions up to 2.0.0-rc8, this option can be found in "Preferences"->"Server"->"Always filter bad IPs").

Talk:IPFilter

2005-09-18T22:33:50Z

85.74.29.70:

'''1)The Peerguardian antip2p filter (http://www.methlabs.org/sync/) is much bigger than the given ipfilter.dat (almost 7000 lines bigger).''' 
'''Which one is the most uptodate? (I can actually guess that!)'''
Up to date? hard to know. probably both are more or less the same. But loafing a large ipfilter requieres quite some CPU/MEM usage and might not be really a good idea in some environments, depending on what it is actually filtering.

'''2)Two filtering levels are defined, one in the ipfilter.dat file and another in preferences->security->ip-filter-filtering level.''' 
'''Which one applies?''' 
No idea, sorry. Ask Phoenix at [http://forum.amule.org forums] or at [[aMule]]'s [[IRC]] channel.I guess the one at preferences is the one used unless the file already assiges one (AFAIK, there's no way to have a file to hard-set a security number, but if you say it does...). 
'''Why are there so many filtering levels (0,1,...127,128,...)???''' 
There are so many so that you can decide what to filter and what to not filter without having to re-edit the whole file. Just changing the security value in Preferences.

Greetings!

----

I have a question to this: 

''NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format, which is the most popular. The antip2p.txt format isn't yet supported).''

Question: On blocklist.org, where you can download PeerGuardian blocklists, there are 3 versions available. Is aMule's ipfilter.dat compatible to all versions? I'd like to use a customized Version1 list (PeerGuardian plain text).

'''I have really no idea at all. Please test and report what you find out :)'''

Well, depends on the version (the original list contains 83990 ranges and 2344303895 IPs): 
2.0.3 (dude's Debian stable package) tells me about 83000 '''IPs''' are filtered 
CVS (20050913) (vollstrecker's Debian package) tells me 83979 '''ranges''' are filtered (11 malformed lines were discarded). 
So i'm unsure just about the stable (2.0.3) version. Are the whole ranges blocked or just the first IP of each range? 
One example line from '''my ipfilter_static.dat''': 
''Bogon:0.0.0.1-2.255.255.255'' 
While the '''wiki/index.php/Ipfilter.dat_file''' gives me: 
''IPs range values are described by an initial IP a dash and the ending IP of tha range (the dash must be separated from the IPs by a single space character). 
000.000.000.000 - 000.255.255.255 , 000 , "This" Network [RFC1700, page 4]''

'''Non valid IPs are discarded. Also, if a line discribes a range in a nonvalid way, not only the first IP will be discarded, but the whole range, since aMule won't be able to understand its meaning.'''

'''I'm not sure if I understood what you were saying, but I hope I did ;)'''

''' You could ask at http://forum.amule.org if you wish, since gonosztopi is checking forums there and he's the one who wrote the IPFilter code. If you get to some conclusion... please report here :)'''

'''Greets!'''

Well, aMule supports the PeerGuardian lists (only version 1).
So I added their source (blocklist.org) to ''IP Filter sources''. But I'm not sure what ''IP Filter sources'' is intended to list: 
only web-addresses from which you can automatically update the ipfilter.dat (you can't do this with blocklist.org) or also web-addresses that have lists that you can manually insert (you can do this with blocklist.org). 
See also [http://forum.amule.org/thread.php?threadid=7389&sid= this thread] 
 
Also see that the log message in 2.0.3 is slightly inaccurate, but the actual behavior is what you would want/expect. It is always ranges that are filtered, not individual IP addresses.

Greetings and Thanks 
jere (I can't login for the wikis, but in the forum I can)

'''Thanks a lot for the update :)'''

----

''The antip2p.txt format isn't yet supported.'' 
Is this about the former bluetack antip2p.txt? This list is called level1.txt now and it works fine with me. So, if yes, just kick this sentence. 
jere

'''Sorry, I don't I understand what you mean. I'm not quite good at IP Filter ;)'''

I'm talking about this paragraph in the [[IPFilter]]-article: 
''NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format (Version 1), which is the most popular. The antip2p.txt format isn't yet supported).'' 

[http://www.bluetack.co.uk/modules.php?name=FAQ&myfaq=yes&id_cat=6&categories=Blacklists+FAQ Here] on the [http://www.bluetack.co.uk/index.php bluetack homepage] I found this: 
''There are no longer any default lists in the Blocklist Manager and the '''Anti-P2P list is now called the Level 1 list'''.'' 
[http://www.bluetack.co.uk/modules.php?name=Downloads&d_op=viewdownload&cid=2 Here] they say about the Level 1 list: 
''Description: The Antip2p list that is used by most p2p software Nuff Said'' 

So I think antip2p.txt was a [http://www.bluetack.co.uk/index.php bluetack]-list.
As I can see PeerGuardian/methlabs/blocklist.org(version1) and bluetack have the same list-format. It's not exactly the same as described in the [[Ipfilter.dat]] but very similar and when I tested these lists, they all worked fine. 

I propose to change the paragraph in the [[IPFilter]]-article to this: 
''NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format (Version 1), which is the most popular.'' 

Or perhaps to: 
''NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's.'' 

Greetings 
jere

IPFilter

2005-09-18T22:00:32Z

85.74.29.70:

== Description ==

The [[IP]] Filter blocks traffic from/to IPs and ranges of [[IP]]s with our [[client]]. This means that those [[IP]]s which get blocked will not be able neither to upload to us nor to download from us.

This filter is read from [[ipfilter.dat_file|''~/.aMule/ipfilter.dat'']] which is a file which's contents describes the valid and blocked [[IP]] ranges.

== [[ipfilter.dat file]] ==

The information and details about the [[ipfilter.dat file]] can be found [[ipfilter.dat file|here]].

== Using the [[IP]] Filter in [[aMule]] ==

The ''Access level'' of the [[IP]] filter is selected in [[aMule]] through "Preferences" -> "Security" -> "IP Filtering" -> "Filtering level" (in [[aMule]] versions up to 2.0.0-rc8 it is under "Server", instead of "Security").

'''NOTE:''' [[aMule]]'s ''ipfilter.dat'' file is 100% compatible with [[eMule]]'s ([[eMule]]'s [http://www.methlabs.org/methlabs.htm PeerGuardian] format (Version 1), which is the most popular. The ''antip2p.txt'' format isn't yet supported).

== [[IP]] Filter sources ==

=== IP Filter - URLs for Auto-update at startup ===

http://emulepawcio.sourceforge.net/nieuwe_site/Ipfilter_fakes/ipfilter.dat (Last update: 28 August 2005)

http://www.emulext.net/seguridad/Mc4TuTi/ipfilter.dat (Last update: February 2005)

http://www.autistici.org/smokingmath/ipfilter.dat (Only filters [[fake]] [[server]]s. Last update: 8 August 2005)

http://www.bluetack.co.uk/config/ipfilter.dat

=== IP Filter sites - Insert these lists manually or with a script===

'''NOTE:''' Do '''NOT''' use methlabs.org or blocklist.org, they are hijacked and are now '''fake''' sites looking for '''economic profit''' and '''lucration'''!

http://bluetack.co.uk/config/sources.txt (Replacement for ''methlabs.org'' and ''blocklist.org'')

http://emulepawcio.sourceforge.net/nieuwe_site/ipfilter_fake_list.html

http://www.openmedia.info/p27.html (Last update: 12 September 2005)

== Hard coded [[IP]] filter in [[aMule]] ==

[[aMule]] has a range of [[IP]]s which it filters by default following the [http://www.rfc-editor.org/rfc/rfc3330.txt RFC 3330] document. This ranges are:

<pre>
Address Block Present Use Reference
----------------------------------------------------------------------
"0.0.0.0/8", // "This" Network [RFC1700, page 4]
"10.0.0.0/8", // Private-Use Networks [RFC1918]
"14.0.0.0/8", // Public-Data Networks [RFC1700, page 181]
"24.0.0.0/8", // Cable Television Networks --
"39.0.0.0/8", // Reserved but subject
// to allocation [RFC1797]
"127.0.0.0/8", // Loopback [RFC1700, page 5]
"128.0.0.0/16", // Reserved but subject
// to allocation --
"169.254.0.0/16", // Link Local --
"172.16.0.0/12", // Private-Use Networks [RFC1918]
"191.255.0.0/16", // Reserved but subject
// to allocation --
"192.0.0.0/24", // Reserved but subject
// to allocation --
"192.0.2.0/24", // Test-Net
"192.88.99.0/24", // 6to4 Relay Anycast [RFC3068]
"192.168.0.0/16", // Private-Use Networks [RFC1918]
"198.18.0.0/15", // Network Interconnect
// Device Benchmark Testing [RFC2544]
"223.255.255.0/24",// Reserved but subject
// to allocation --
"224.0.0.0/4", // Multicast [RFC3171]
"240.0.0.0/4" // Reserved for Future Use [RFC1700, page 4]
</pre>

However, you can un-filter this range of [http://www.faqs.org/rfcs/rfc791.html IP]s by unchecking "Preferences"->"Security"->"IP-filtering"->"Always filter bad IPs" (on [[aMule]] versions up to 2.0.0-rc8, this option can be found in "Preferences"->"Server"->"Always filter bad IPs").

IPFilter

2005-09-18T12:19:26Z

85.74.29.70: Changed the Filter sources section

== Description ==

The [[IP]] Filter blocks traffic from/to IPs and ranges of [[IP]]s with our [[client]]. This means that those [[IP]]s which get blocked will not be able neither to upload to us nor to download from us.

This filter is read from [[ipfilter.dat_file|''~/.aMule/ipfilter.dat'']] which is a file which's contents describes the valid and blocked [[IP]] ranges.

== [[ipfilter.dat file]] ==

The information and details about the [[ipfilter.dat file]] can be found [[ipfilter.dat file|here]].

== Using the [[IP]] Filter in [[aMule]] ==

The ''Access level'' of the [[IP]] filter is selected in [[aMule]] through "Preferences" -> "Security" -> "IP Filtering" -> "Filtering level" (in [[aMule]] versions up to 2.0.0-rc8 it is under "Server", instead of "Security").

'''NOTE:''' [[aMule]]'s ''ipfilter.dat'' file is 100% compatible with [[eMule]]'s ([[eMule]]'s [http://www.methlabs.org/methlabs.htm PeerGuardian] format (Version 1), which is the most popular. The ''antip2p.txt'' format isn't yet supported).

== [[IP]] Filter sources ==

=== IP Filter - URLs for Auto-update at startup ===

http://emulepawcio.sourceforge.net/nieuwe_site/Ipfilter_fakes/ipfilter.dat (Last update: 28 August 2005)

http://www.emulext.net/seguridad/Mc4TuTi/ipfilter.dat (Last update: February 2005)

http://www.autistici.org/smokingmath/ipfilter.dat (Only filters [[fake]] [[server]]s. Last update: 8 August 2005)

=== IP Filter sites - Insert these lists manually or with a script===

'''NOTE:''' Do '''NOT''' use methlabs.org or blocklist.org, they are hijacked and are now '''fake''' sites looking for '''economic profit''' and '''lucration'''!

http://bluetack.co.uk/config/sources.txt (Replacement for ''methlabs.org'' and ''blocklist.org'')

http://emulepawcio.sourceforge.net/nieuwe_site/ipfilter_fake_list.html

http://www.openmedia.info/p27.html (Last update: 12 September 2005)

== Hard coded [[IP]] filter in [[aMule]] ==

[[aMule]] has a range of [[IP]]s which it filters by default following the [http://www.rfc-editor.org/rfc/rfc3330.txt RFC 3330] document. This ranges are:

<pre>
Address Block Present Use Reference
----------------------------------------------------------------------
"0.0.0.0/8", // "This" Network [RFC1700, page 4]
"10.0.0.0/8", // Private-Use Networks [RFC1918]
"14.0.0.0/8", // Public-Data Networks [RFC1700, page 181]
"24.0.0.0/8", // Cable Television Networks --
"39.0.0.0/8", // Reserved but subject
// to allocation [RFC1797]
"127.0.0.0/8", // Loopback [RFC1700, page 5]
"128.0.0.0/16", // Reserved but subject
// to allocation --
"169.254.0.0/16", // Link Local --
"172.16.0.0/12", // Private-Use Networks [RFC1918]
"191.255.0.0/16", // Reserved but subject
// to allocation --
"192.0.0.0/24", // Reserved but subject
// to allocation --
"192.0.2.0/24", // Test-Net
"192.88.99.0/24", // 6to4 Relay Anycast [RFC3068]
"192.168.0.0/16", // Private-Use Networks [RFC1918]
"198.18.0.0/15", // Network Interconnect
// Device Benchmark Testing [RFC2544]
"223.255.255.0/24",// Reserved but subject
// to allocation --
"224.0.0.0/4", // Multicast [RFC3171]
"240.0.0.0/4" // Reserved for Future Use [RFC1700, page 4]
</pre>

However, you can un-filter this range of [http://www.faqs.org/rfcs/rfc791.html IP]s by unchecking "Preferences"->"Security"->"IP-filtering"->"Always filter bad IPs" (on [[aMule]] versions up to 2.0.0-rc8, this option can be found in "Preferences"->"Server"->"Always filter bad IPs").

Talk:IPFilter

2005-09-18T11:59:12Z

85.74.29.70:

'''1)The Peerguardian antip2p filter (http://www.methlabs.org/sync/) is much bigger than the given ipfilter.dat (almost 7000 lines bigger).''' 
'''Which one is the most uptodate? (I can actually guess that!)'''
Up to date? hard to know. probably both are more or less the same. But loafing a large ipfilter requieres quite some CPU/MEM usage and might not be really a good idea in some environments, depending on what it is actually filtering.

'''2)Two filtering levels are defined, one in the ipfilter.dat file and another in preferences->security->ip-filter-filtering level.''' 
'''Which one applies?''' 
No idea, sorry. Ask Phoenix at [http://forum.amule.org forums] or at [[aMule]]'s [[IRC]] channel.I guess the one at preferences is the one used unless the file already assiges one (AFAIK, there's no way to have a file to hard-set a security number, but if you say it does...). 
'''Why are there so many filtering levels (0,1,...127,128,...)???''' 
There are so many so that you can decide what to filter and what to not filter without having to re-edit the whole file. Just changing the security value in Preferences.

Greetings!

----

I have a question to this: 

''NOTE: aMule's ipfilter.dat file is 100% compatible with eMule's (eMule's PeerGuardian format, which is the most popular. The antip2p.txt format isn't yet supported).''

Question: On blocklist.org, where you can download PeerGuardian blocklists, there are 3 versions available. Is aMule's ipfilter.dat compatible to all versions? I'd like to use a customized Version1 list (PeerGuardian plain text).

'''I have really no idea at all. Please test and report what you find out :)'''

Well, depends on the version (the original list contains 83990 ranges and 2344303895 IPs): 
2.0.3 (dude's Debian stable package) tells me about 83000 '''IPs''' are filtered 
CVS (20050913) (vollstrecker's Debian package) tells me 83979 '''ranges''' are filtered (11 malformed lines were discarded). 
So i'm unsure just about the stable (2.0.3) version. Are the whole ranges blocked or just the first IP of each range? 
One example line from '''my ipfilter_static.dat''': 
''Bogon:0.0.0.1-2.255.255.255'' 
While the '''wiki/index.php/Ipfilter.dat_file''' gives me: 
''IPs range values are described by an initial IP a dash and the ending IP of tha range (the dash must be separated from the IPs by a single space character). 
000.000.000.000 - 000.255.255.255 , 000 , "This" Network [RFC1700, page 4]''

'''Non valid IPs are discarded. Also, if a line discribes a range in a nonvalid way, not only the first IP will be discarded, but the whole range, since aMule won't be able to understand its meaning.'''

'''I'm not sure if I understood what you were saying, but I hope I did ;)'''

''' You could ask at http://forum.amule.org if you wish, since gonosztopi is checking forums there and he's the one who wrote the IPFilter code. If you get to some conclusion... please report here :)'''

'''Greets!'''

Well, aMule supports the PeerGuardian lists (only version 1).
So I added their source (blocklist.org) to ''IP Filter sources''. But I'm not sure what ''IP Filter sources'' is intended to list: 
only web-addresses from which you can automatically update the ipfilter.dat (you can't do this with blocklist.org) or also web-addresses that have lists that you can manually insert (you can do this with blocklist.org). 
See also [http://forum.amule.org/thread.php?threadid=7389&sid= this thread] 
 
Also see that the log message in 2.0.3 is slightly inaccurate, but the actual behavior is what you would want/expect. It is always ranges that are filtered, not individual IP addresses.

Greetings and Thanks 
jere (I can't login for the wikis, but in the forum I can)

'''Thanks a lot for the update :)'''

----

''The antip2p.txt format isn't yet supported).'' 
Is this about the former bluetack antip2p.txt? This list is called level1.txt now and it works fine with me. So, if yes, just kick this sentence. 
jere