Ultima Posted May 26, 2007 Report Share Posted May 26, 2007 Yeah, I realized that last week, but forgot to correct that post Link to comment Share on other sites More sharing options...
Fried Egg Posted August 5, 2007 Report Share Posted August 5, 2007 Is there a complete list somewhere of all IP ranges that should be blocked? Link to comment Share on other sites More sharing options...
slipstream Posted August 5, 2007 Report Share Posted August 5, 2007 Fried Egg,Yes, in ipfilter.dat format - http://emulepawcio.sourceforge.net/nieuwe_site/ipfilter_fake_list.html Link to comment Share on other sites More sharing options...
Fried Egg Posted August 5, 2007 Report Share Posted August 5, 2007 slipstreamThanks for that. Can I just clarify; I just need to put that ipfilter.dat file into my %AppData%/utorrent directory? What are the other files listed there? Link to comment Share on other sites More sharing options...
slipstream Posted August 5, 2007 Report Share Posted August 5, 2007 Fried Egg,http://www.utorrent.com/faq.php#What_is_ipfilter.dat.3FPlace it in %AppData%\uTorrent, and set ipfilter.enable to true in the Advanced.To reload ipfilter.dat without restarting µTorrent (1.7+ only), view the Peers tab, right click, and select "Reload IPFilter."If you are interested - that site is for eMule community, so they have also a list of hashes for well-known fake files and an autoupdate system (that is what .txt files with list version numbers are for). Link to comment Share on other sites More sharing options...
jaelanicu Posted September 23, 2007 Report Share Posted September 23, 2007 @slipstream:That ipfilter.dat from that site is for blocking the eDonkey tracker server. I do not think it would be effective for torrent IPs.Is there a site that provide ipfilter.dat for torrent? Link to comment Share on other sites More sharing options...
Switeck Posted September 25, 2007 Report Share Posted September 25, 2007 The same companies that block/disrupt eDonkey do the same to torrents, and use the same ips to do it.You'd see that if you ever connected to a poisoned or fake torrent. Link to comment Share on other sites More sharing options...
jaelanicu Posted September 25, 2007 Report Share Posted September 25, 2007 OK. Maybe I should try it. No harm for doing it anyway.When I reload a modified ipfilter, will the currently connected IPs that are blocked be immediately closed?Or do I have to restart the torrent download?BTW, this poisoning attack can be a serious threat to the torrent world.Something should be done to find which peer(s) that poison a torrent. Link to comment Share on other sites More sharing options...
Switeck Posted September 27, 2007 Report Share Posted September 27, 2007 It's not hard to spot if it's occurring on the torrent you're on.Lots of ips in a narrow range, very little activity from the...and typically 1 hash fail from each. Link to comment Share on other sites More sharing options...
jaelanicu Posted September 28, 2007 Report Share Posted September 28, 2007 Can the peer's torrent percentage (percent column) be used as a hint also?For example, can a peer with high or full percentage be trusted? Link to comment Share on other sites More sharing options...
Switeck Posted September 28, 2007 Report Share Posted September 28, 2007 If it's a fake torrent, probably not for full seeds.But the 90+% peers all at the same percentage probably are legit peers.You really have to see if the ips all claim to be on the same ISP (using Resolve IPs) and/or do internet WHOIS searches. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.