General MoBlock thread [Archive]

View Full Version : General MoBlock thread

Pages : [1] 2

jre

May 22nd, 2008, 03:40 AM

Hi all,

this is the new general Moblock thread.

MoBlock (http://moblock.berlios.de/) (like the Windows application PeerGuardian (http://phoenixlabs.org/)) is an application that blocks internet traffic based on large lists of IP address ranges in order to protect your privacy. Hint for all the people doing support here: This is often the reason for "network problems" - I do my best to make users aware of this fact.

blockcontrol (previously moblock-control) provides easy ways to interact with MoBlock and do all common related tasks.

mobloquer is a GUI on top of blockcontrol.

You can get Debian (Ubuntu) packages from http://moblock-deb.sourceforge.net (I'm the maintainer of this site). You'll also find Debian packages for the graphical interface mobloquer (http://mobloquer.foutrelis.com/) there.

There's an HOWTO on https://help.ubuntu.com/community/MoBlock

I do my support in this and all other ubuntuforums.org threads that contain the keyword "moblock". You will also find me at the Linux forum of phoenixlabs.org (http://forums.phoenixlabs.org/forumdisplay.php?f=15) or directly at the project's homepage at sourceforge.net.

jre

News

2009-11-12: New project PeerGuardian Linux
There's a new project: PeerGuardian Linux (pgl), located at the project of the original PeerGuardian (http://sourceforge.net/projects/peerguardian/). The new project combines and succeeds all projects that had packages here. There's the daemon pgld (based on NFBlock, which was based on MoBlock), pglcmd (based on blockcontrol, previously moblock-control) and pgl-gui (by the author of mobloquer).
All authors of the old applications and new authors work on this new project. So the old projects are dead now. Contributors and testers are welcome! This is an open project. Check the source in the git repository: git://peerguardian.git.sourceforge.net/gitroot/peerguardian/peerguardian
(At least for the beginning) I'll continue to offer Debian packages here (until the first pgl release the old moblock, blockcontrol, nfblock and mobloquer packages), and than later pgl packages. Stay tuned.

2009-08-21: new gpg key for moblock-deb
I´ve got a new key (58712F29) for the repository at moblock-deb.sf.net. My old key expired. So if you are using the moblock-deb repository you have to add my new key to the system:
gpg --keyserver wwwkeys.eu.pgp.net --recv 58712F29
gpg --export --armor 58712F29 | sudo apt-key add -
If you are using the launchpad PPA (as most people will do) you do not have to do anything.

2009-04-23: added jaunty, removed gutsy support
jaunty is now supported via a ppa at launchpad. See the wiki or moblock-deb.sourceforge.net for the sources.list entry and the new gpg key.

2009-03-22: moblock-control renamed to blockcontrol

Full support for Moblock and NFBlock.
New option "search": Examine your selected blocklists by searching the single blocklists for keywords.
All user configuration is now done in /etc/blockcontrol/blockcontrol.conf. Not any more in /etc/default/...

2009-01-11: Current development status
MoBlock: The last official release was in 2006, and a new one is still planned. The MoBlock upstream author is still active. The version in the packages is 0.9RC2 from February 2008 and since then I've applied some useful patches that I got.

moblock-control: I'm still active. Of course help, patches, reports and suggestions are always welcome.

mobloquer (GUI): The author is currently inactive, due to real life time restrictions. Unfortunately, he has not found a new developer yet. The last stable release 0.5 is packaged at moblock-deb.sourceforge.net, but I will soon update it to the SVN version and add some own patches.

Alternatives:
NFBlockD (daemon): actively developed. Works together with moblock-control. I intend to package this app, too.

IPList (daemon and GUI): actively developed, repository is available.

2009-01-09: moblock-control 1.2 released

New handling of blocklists:

php redirects are supported now. This allows to use the lists from iblocklist.com. All lists are downloaded from there per default now.
Since moblock-control 1.1 the default blocklists are by "The Blocklist Group" (tbg.iblocklist.com) instead of Bluetack (bluetack.co.uk).
The single blocklists are saved in new places now (but still under /var/spool/moblock/.
The master blocklist (e.g. guarding.p2p) is now saved in /var/lib/moblock/ instead of /etc/moblock/.
Several changes to make sure that the master blocklist exists and reflects the configuration. All changes are always applied on "start" now.
The (Debian) installation only requires the blocklists (and therefore network access) to be available, if the automatic start (init) is configured.

Per default allow.p2p is not used for forwarded traffic.
Dropped support for Ubuntu Feisty, as this is no more supported by Ubuntu since October 19th, 2008.

2008-09-27:
Currently there are some issues with the blocklist updates. Thanks lovinglinux, for noticing us! (http://ubuntuforums.org/showpost.php?p=5863138&postcount=87)
Per default you all use the blocklists by bluetack. Now, according to this thread (http://forums.phoenixlabs.org/showthread.php?t=17291) most of the people who were in charge of with these blocklists quit bluetack and started their own project: TBG (The Blocklist Group) (http://blocklist1.snowmanuk.net/). So (according to the mentioned thread) the old blocklists from bluetack lack the old level of maintenance.
Further, perhaps fully unrelated to all this, the download of the bluetack lists currently frequently fails.

For people not having problems: Do nothing, be happy, don't make unnecessary blocklist downloads.

For all people having update problems: MoBlock will refuse to start if not all configured blocklists are available. So your problem is the download of the blocklists, but not a problem of your installation. So do NOT purge moblock-control - this will remove all downloaded blocklists, even those that were already downloaded successfully - so purging will make your problems bigger.

What you can do now:
Check what blocklists fail to download in /var/log/moblock-control.

If you want to use that blocklists try a "moblock-control update" or download it manually. Then place the blocklist in /var/spool/moblock/used. (e.g. "sudo cp level1.gz /var/spool/moblock/used")

If you don't want to use that blocklist just run "sudo dpkg-reconfigure moblock-control" and deselect the blocklist in question. For the other questions that you will be asked - just keep everything as it is. Then do a "moblock-control update".

If you want to use blocklists by TBG just add them to /etc/moblock/blocklists.list and do a "moblock-control update".

What I will do: I'll prepare a update which uses the new lists by TBG per default (this will only work on new installs). On updates from the current installations I'll notice the user of the current situation.

2008-09-26:

"moblock-control" is a separate package now. So install "moblock" and "moblock-control" to have the functionality of the old "moblock" package. This will happen automatically on a normal update with your package manager.
The custom iptables scripts /etc/moblock/iptables-custom-insert.sh and /etc/moblock/iptables-custom-remove.sh now are executed for IPTABLES_SETTINGS="1", too. This happens after moblock-control's iptables commands. Use these scripts e.g. for additional sophisticated whitelisting rules. Some examples are given in these files.
Thanks, anonymous, for the hints about iptables owner module and IPv6.

2008-05-22:
I created this thread so that pelle.[Chuc]k[Norris] (http://ubuntuforums.org/member.php?u=50108) can close his thread (http://ubuntuforums.org/showpost.php?p=4686096&postcount=1154). pelle started (http://ubuntuforums.org/showthread.php?t=192559) the very successful HOWTO here at ubuntuforums but doesn't find enough time to maintain it any more ... Thanks!

How to make sure that MoBlock is integrated correctly with any other firewall

Check your iptables rules with blockcontrol status:
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 147K packets, 185M bytes)
pkts bytes target prot opt in out source destination
93 9633 blockcontrol_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW mark match !0x14
[iptables rules of firewall applications may follow here]

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 blockcontrol_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW mark match !0x14
[iptables rules of firewall applications may follow here]

Chain OUTPUT (policy ACCEPT 110K packets, 17M bytes)
pkts bytes target prot opt in out source destination
975 61829 blockcontrol_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW mark match !0x14
[iptables rules of firewall applications may follow here]

Chain blockcontrol_fw (1 references)
pkts bytes target prot opt in out source destination
[iptables rules for whitelisting forwarded packets are placed here]
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0xa
0 0 RETURN all -- * * 192.168.178.0/24 192.168.178.0/24
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain blockcontrol_in (1 references)
pkts bytes target prot opt in out source destination
[iptables rules for whitelisting incoming packets are placed here]

0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0xa
85 8617 RETURN all -- * * 192.168.178.0/24 0.0.0.0/0
6 360 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
2 656 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain blockcontrol_out (1 references)
pkts bytes target prot opt in out source destination
[iptables rules for whitelisting outgoing packets are placed here]
63 2576 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0xa reject-with icmp-port-unreachable
309 24277 RETURN all -- * * 0.0.0.0/0 192.168.178.0/24
6 360 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
352 21120 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
177 10620 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
64 2636 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

[Other chains are ok]

Make sure that there are not any iptables rules in the chains INPUT/OUTPUT/FORWARD before the MoBlock rules (there are exceptions possible but I won't discuss them here). If this is not the case then do a blockcontrol restart.

Traffic that reaches the target NFQUEUE will be checked by MoBlock. MoBlock then MARKs them: Allowed packets (IP is not in the blocklist) get the mark "20" (shown as 0x14 by iptables) and blocked packets (IP is in the blocklist) get the mark "10" (0xa).

Marked packets repeat the hook function (NF_REPEAT). So they are sent back to
the head of the iptables chain again and go through the rules again, but this time bearing the mark.

The targets REJECT and DROP in the moblock_* chains decide what happens to "marked match" packets. So if MoBlock blocks a packet it will be REJECTed if it was outgoing traffic, and DROPped if it was input traffic.

The lines with target RETURN in the moblock_* chains are optional. They cause that some traffic is not checked by MoBlock (aka allow and whitelisting traffic).
In the example my LAN (192.168.178.0/24) and the loopback interface were whitelisted automatically. Further I allow outgoing traffic on port 80 (http) and 443 (https).

If you are missing a rule, do a blockcontrol restart.
Of course the numbers of packets and bytes do vary.

Edits:
2008-05-22: added information about integration with other firewall applications
2008-09-26: Updated.

meden

May 23rd, 2008, 12:08 PM

jre

May 24th, 2008, 03:24 AM

Hi,
the first question can only be: which is the (current) correct and most effective way to make Moblock interoperate with Firehol?

There are several guides (including the old thread), but there is no clear indication if they are updated to last version of Moblock.
In detail, it would be interesting (to me, at least...) a (definitive) guide to both possible approaches, with IPTABLES_SETTINGS="1" and IPTABLES_SETTINGS="0".

Thank you.

Just make sure that firestarter is started before MoBlock. Then go with the Moblock 0.9 default settings (i.e. FONT="Courier New"]IPTABLES_SETTINGS="1"[/FONT] and MARKing on). Every firestarter change then requires a moblock-control restart.
I have just added informations to post #1 how you can verify correct settings.

If the above doesn't work for you you can go with the other old instructions.

Finally you may try this (not tested, please give feedback if you do this):
Keep the MoBlock configuration as it is. In the firehol.conf add as last line moblock-control restart.
IIRC firehol works that way that commands in its conf are simply executed, so this way you can make sure that MoBlock is restarted after every firehol change (firehol purges all other iptables rules).

Nepherte

May 24th, 2008, 12:22 PM

Moblock doesn't want to run anymore on startup. I have to start it by entering the command (sudo moblock-control start) after my system has start up even though the configuration file is ok:
...
# Turn on/off automatic start
# 0 - Don´t start MoBlock at system boot
# 1 - Start MoBlock at system boot
MOBLOCK_INIT="1"
...
I do remember it worked for some time. Any ideas on how to solve it?

jre

May 24th, 2008, 03:02 PM

Moblock doesn't want to run anymore on startup. I have to start it by entering the command (sudo moblock-control start) after my system has start up even though the configuration file is ok:
...
# Turn on/off automatic start
# 0 - Don´t start MoBlock at system boot
# 1 - Start MoBlock at system bootl.log
MOBLOCK_INIT="1"
...
Make sure /etc/default/moblock is not configured otherwise (e.g. mobloquer does save its configuration there).

If this doesn't help: What's the output on system boot? What's in /var/log/moblock-control.log?

chronniff

May 25th, 2008, 02:07 AM

so moblock is now working with with firestarter? Sorry to make you repeat yourself...I haven't payed any of this any thought in a while, but I used the old thread a long time ago now and from what I had gathered, before I gave up and made do, was that no one got them working together, so I'm just making sure that I am understanding you correctly that as long as I restart moblock every time I change something in firestarter that they will play nicely? If so..god bless you, that's one less headache I need to deal with!!

jre

May 25th, 2008, 04:50 AM

so moblock is now working with with firestarter? [...] as long as I restart moblock every time I change something in firestarter that they will play nicely?
Yes. further conditions of course: moblock version 0.9~rc2 with marking on. These conditions are fulfilled when you install the current moblock (not moblock-nfq or moblock-ipq) package from moblock-deb.sf.net

Nepherte

May 25th, 2008, 05:17 AM

Make sure /etc/default/moblock is not configured otherwise (e.g. mobloquer does save its configuration there).
/etc/default/moblock is all empty except for some comment blocks.

This is the output of /var/log/moblock-control.log for the last two days:
2008-05-24 13:07:04 CEST Begin: /usr/bin/moblock-control start
Inserting iptables ...done.
Starting MoBlock ...done.
2008-05-24 13:07:04 CEST End: /usr/bin/moblock-control start
2008-05-24 15:32:22 CEST Begin: /usr/bin/moblock-control start
Inserting iptables ...done.
Starting MoBlock ...done.
2008-05-24 15:32:22 CEST End: /usr/bin/moblock-control start
2008-05-25 11:07:09 CEST Begin: moblock-control start
Inserting iptables^M^[[74G[ OK ]
Starting MoBlock^M^[[74G[ OK ]
2008-05-25 11:07:09 CEST End: moblock-control start
2008-05-25 11:08:01 CEST Begin: moblock-control stop
Deleting iptables * .
Stopping MoBlock^M^[[74G[ OK ]
2008-05-25 11:08:01 CEST End: moblock-control stop

chris.tkd

May 25th, 2008, 05:52 AM

After the latest moblock update it seems to blocking out everything, including Http connections even tho i have marked them as exceptions in Mobloquer, it also blocks out bluetack, also i removed the microsoft entry from the blocklists any idea how i can get this back.

Thanks.

jre

May 25th, 2008, 08:22 AM

@Nepherte: Hmm, seems to be alright.

Please post
ls -l `sudo find /etc/ -name "*moblock*"`
I want to make sure if your init entries are still there and set up correctly.

Does sudo /etc/init.d/moblock start work? (That's the command which starts MoBlock at system boot.)

What's the state after you booted? Please post your moblock-control status directly after system boot.

Are the start entries in the moblock-control.log from your manual starts or from the automatic at system boot?

One last idea: Is LSB="0" set in the moblock.conf?

After the latest moblock update it seems to blocking out everything, including Http connections even tho i have marked them as exceptions in Mobloquer, it also blocks out bluetack, also i removed the microsoft entry from the blocklists any idea how i can get this back.
Please post moblock-control status and your /etc/default/moblock.

D'oh, always these strange things :-/
jre

chris.tkd

May 25th, 2008, 08:36 AM

Hi, Thanks for the reply

moblock-control status is

Current iptables rules (this may take awhile):
Chain INPUT (policy ACCEPT 516K packets, 131M bytes)
pkts bytes target prot opt in out source destination
23 2954 moblock_in 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 moblock_fw 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
Chain OUTPUT (policy ACCEPT 597K packets, 648M bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 moblock_out 0 -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE 0 -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN 0 -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
23 2954 NFQUEUE 0 -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN 0 -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.28.93
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.46
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.24
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.95
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.50
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.37
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.17
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.17
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.30
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.39
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.36
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.20
0 0 RETURN 0 -- * * 0.0.0.0/0 65.54.179.216
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.23
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.16
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.106.23
0 0 RETURN 0 -- * * 0.0.0.0/0 207.46.108.57
0 0 RETURN 0 -- * * 0.0.0.0/0 65.54.239.140
0 0 RETURN 0 -- * * 0.0.0.0/0 65.54.239.20
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 NFQUEUE 0 -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Please check if the above printed iptables rules are correct!
* moblock is running, pid is 392.

and /etc/default/moblock is

# moblock.default - default configuration file for moblock-control

# In this file you can put any configuration variable from moblock.conf
# (/etc/moblock/moblock.conf). Values in moblock.conf will be overwritten by
# values in this file (moblock.default).
WHITE_TCP_OUT="http"
WHITE_IP_OUT="65.54.239.20 65.54.239.140 207.46.108.57 207.46.106.23 207.46.106.16 207.46.108.23 65.54.179.216 207.46.106.20 207.46.108.36 207.46.108.39 207.46.106.30 207.46.108.17 207.46.106.17 207.46.108.37 207.46.108.50 207.46.106.95 207.46.106.24 207.46.106.46 207.46.28.93"
WHITE_TCP_IN="http"

Nepherte

May 25th, 2008, 08:45 AM

The output of ls -l `sudo find /etc/ -name "*moblock*"`:
-rwxr-xr-x 1 root root 2861 2008-05-08 22:45 /etc/cron.daily/moblock
-rw-r--r-- 1 root root 258 2008-05-08 22:44 /etc/default/moblock
-rw-r--r-- 1 root root 399 2008-05-08 22:45 /etc/logrotate.d/moblock
-rw-r--r-- 1 root root 4961 2008-05-08 22:17 /etc/moblock/moblock.conf
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc0.d/K20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc1.d/K20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc2.d/S20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc3.d/S20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc4.d/S20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc5.d/S20moblock -> ../init.d/moblock
lrwxrwxrwx 1 root root 17 2008-05-25 11:07 /etc/rc6.d/K20moblock -> ../init.d/moblock

/etc/moblock:
totaal 37652
-rw-r--r-- 1 root root 920 2008-05-03 21:43 blocklists.list
-rw-r--r-- 1 root root 868 2008-01-14 20:40 blocklists.list~
-rw-r--r-- 1 root root 868 2008-05-08 22:17 blocklists.list.dpkg-dist
-rw-r--r-- 1 root root 16405635 2008-05-03 20:49 guarding.p2p
-rw-r--r-- 1 root root 9938230 2008-05-03 21:54 ipfilter.dat
-rw-r--r-- 1 root root 9938230 2008-05-03 21:44 ipfilter.dat.backup
-rwxr-xr-x 1 root root 565 2008-05-08 22:17 iptables-custom-insert.sh
-rwxr-xr-x 1 root root 564 2008-05-08 22:17 iptables-custom-remove.sh
-rw-r--r-- 1 root root 4961 2008-05-08 22:17 moblock.conf
-rwxr-xr-x 1 root root 2596 2008-05-08 22:45 MoBlock-nfq-reject.sh
-rwxr-xr-x 1 root root 2637 2008-05-08 22:17 MoBlock-nfq.sh
-rw-r--r-- 1 bart bart 2167522 2008-05-03 21:56 pipfilter.dat.gz
I checked if /etc/init.d/moblock existed, but the file is nowhere to be found. So i guess we found the reason.

LSB_MODE is set to 0.

The status right after booting the system is: pid is not running.

jre

May 25th, 2008, 09:51 AM

I checked if /etc/init.d/moblock existed, but the file is nowhere to be found. So i guess we found the reason.
Yay.
Either do a sudo aptitude purge moblock && sudo aptitude install moblock (this way you will loose your current configuration, but a simple aptitude reinstall moblock won't help), or copy it there manually:
mkdir ~/moblock
dpkg -X /var/cache/apt/archives/moblock_0.9~rc2-11_i386.deb ~/moblock
sudo cp ~/moblock/etc/init.d/moblock /etc/init.d/moblock
chmod +x /etc/init.d/moblock
Step 1: Create a directory in your home directory
Step 2: Extract the current moblock deb (assuming you haven't deleted it)
Step 3: copy the file to the correct place
Step 4: Make the file executable (although it should be so already)

moblock-control status is

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
[...]
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 NFQUEUE 0 -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Well, 80 is http, so webbrowsing is definitely whitelisted. Still ...

and /etc/default/moblock is

WHITE_TCP_OUT="http"
WHITE_IP_OUT="65.54.239.20 65.54.239.140 207.46.108.57 207.46.106.23 207.46.106.16 207.46.108.23 65.54.179.216 207.46.106.20 207.46.108.36 207.46.108.39 207.46.106.30 207.46.108.17 207.46.106.17 207.46.108.37 207.46.108.50 207.46.106.95 207.46.106.24 207.46.106.46 207.46.28.93"
WHITE_TCP_IN="http"
Replace WHITE_TCP_OUT="http" with WHITE_TCP_OUT="80 8080 443":
- port 80 is what the service name "http" really means (IMHO it was not a good idea of the iptables team to introduce the ambiguous service name "http". So for the sake of clarity i prefer "80". Anyway, that's not important here.)
- port 8080 is sometimes an alternative to 80, chosen by a few webpages. Let's add that here, too.
- 443 (service name https) may also help.
So now, do a moblock-control restart and try again. Does it work now?
If not: no websurfing at all or just not a few pages?
Are blocks shown in the logfile when you can't surf to a webpage?

A few more comments:

Instead of many seperate entries you might want to whitelist the entire range 207.46.106.0-207.46.106.255. Just delete the single 207.46.106.XXX entries and add a 207.46.106.0/24 instead.

There's no need to whitelist incoming port 80 (http), except if you have set up apache and are providing a homepage. So remove the WHITE_TCP_IN="http" entry. I guess you just did that while trying to fix your problems, but this won't help ...

General, if mobloquer does not automatically do so, always do a moblock-control restart when you have changed something in the whitelisting.

greets
jre

Nepherte

May 25th, 2008, 10:46 AM

Thanks. That solved the problem.

alonecity

May 26th, 2008, 11:18 AM

I have the same problem as Chris. When Moblock is running, I don't have any web browsing at all. It stays stuck at "looking up domain.com" on any site I try.

Here's my Moblock status:
Current iptables rules (this may take awhile):
Chain INPUT (policy ACCEPT 111K packets, 144M bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
0 0 BLOCK_MATCH all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xffff
2161K 205M INPUT_QUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0xfffe
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
Chain OUTPUT (policy ACCEPT 73993 packets, 5947K bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
148K 9599K moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
0 0 BLOCK_MATCH all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xffff
39M 2650M OUTPUT_QUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0xfffe
Chain ALLOW_IP (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 130.149.17.156-130.149.17.156
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 66.35.250.209-66.35.250.209
Chain BLOCK_MATCH (2 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain INPUT_QUEUE (1 references)
pkts bytes target prot opt in out source destination
2161K 205M ALLOW_IP all -- * * 0.0.0.0/0 0.0.0.0/0
2161K 205M NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 255
Chain OUTPUT_QUEUE (1 references)
pkts bytes target prot opt in out source destination
2444 156K RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
33 1980 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110
39M 2650M ALLOW_IP all -- * * 0.0.0.0/0 0.0.0.0/0
39M 2650M NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 255
Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 192.168.200.0/24
0 0 RETURN all -- * * 192.168.200.0/24 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 192.168.200.0/24 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 204.227.127.200
0 0 RETURN all -- * * 0.0.0.0/0 192.168.200.0/24
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
1 60 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
148K 9599K NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0
Please check if the above printed iptables rules are correct!
* moblock is running, pid is 2576.

Here's my whitelist
# moblock.default - default configuration file for moblock-control

# In this file you can put any configuration variable from moblock.conf
# (/etc/moblock/moblock.conf). Values in moblock.conf will be overwritten by
# values in this file (moblock.default).
WHITE_TCP_OUT="80 8080 443 ftp imap smtp pop3"
WHITE_IP_IN="192.168.200.0/24"
WHITE_IP_OUT="192.168.200.0/24 204.227.127.200"
WHITE_IP_FORWARD="192.168.200.0/24"

jre

May 28th, 2008, 02:06 PM

@ alonecity:
I need answers to these questions, too:
If not: no websurfing at all or just not a few pages?
Are blocks shown in the logfile when you can't surf to a webpage?

Is 192.168.200.0/24 your LAN (in doubt post the output of sudo ifconfig)? If not, then you should whitelist your LAN.

techstop

May 29th, 2008, 09:13 AM

jre

May 29th, 2008, 09:15 AM

You can download preview packages of MoBlock (0.9~rc2-12~pre37) here: http://moblock-deb.sourceforge.net/preview

Next to many other changes this version has debconf support. Of course I want to know if it works technically. But I'm also interested in feedback about the debconf descriptions. Are they unclear, too technical, ...?

Further, thanks to Cader (http://forums.phoenixlabs.org/showthread.php?p=116645), it's now possible to find out the ports of blocked packets. Have a look at the NEWS (/usr/share/doc/moblock/NEWS.Debian.gz)

jre

ApUUbunU

May 29th, 2008, 10:34 AM

I installed Moblock recently, and now it doesn't work for some reason. I removed all whitelist IPs from the list in moblock.conf, and for some reason, I can still access the internet, when I should be blocked from my router.

I think this problem may be down to the firewall in Ubuntu. Moblock worked well before I installed firestarter, the GUI for the firewall. Now it seems as if Moblock doesn't work at all.

So, what should be my next step from here, in trying to get Moblock to work. It worked perfectly fine before!

Oh yes, I'm not using Mobloquer, but the non-GUI interface instead. I will try switching to the GUI, and see if that solves my problems.

jre

May 29th, 2008, 10:40 AM

Nice one, thanks for your work. Just a note though, by enabling the repos listed on the sourceforge page you link to, I have been able to install moblock and mobloquer on 64-bit. The page at https://help.ubuntu.com/community/MoBlock says you have to compile from source to get it working on 64-bit.
I just updated that page, finally ;-)
Other contributions are of course always welcome!

I installed Moblock recently, and now it doesn't work for some reason. I removed all whitelist IPs from the list in moblock.conf, and for some reason, I can still access the internet, when I should be blocked from my router.

I think this problem may be down to the firewall in Ubuntu. Moblock worked well before I installed firestarter, the GUI for the firewall. Now it seems as if Moblock doesn't work at all.
Do a moblock-control restart. I guess that firestarter purged your moblock iptables rules. You have to make sure that moblock is started after other firewalls or if this is not possible to do a restart. If your problems continue please post the output of moblock-control status.

jre

ApUUbunU

May 29th, 2008, 12:05 PM

Sadly, moblock-control restart didn't make any difference.

Here is the output of moblock-control status:

$ sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 192.168.0.1 0.0.0.0/0 tcp flags:!0x17/0x02
14 1729 ACCEPT udp -- * * 192.168.0.1 0.0.0.0/0
1 576 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 DROP all -- wlan0 * 0.0.0.0/0 255.255.255.255
0 0 DROP all -- * * 0.0.0.0/0 192.168.0.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
1595 1011K INBOUND all -- wlan0 * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Input'
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Forward'
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 192.168.0.2 192.168.0.1 tcp dpt:53
14 887 ACCEPT udp -- * * 192.168.0.2 192.168.0.1 udp dpt:53
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
15 1964 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
1649 201K OUTBOUND all -- * wlan0 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Output'
0 0 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain INBOUND (1 references)
pkts bytes target prot opt in out source destination
1592 1011K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
3 144 LSI all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 221.195.56.54 0.0.0.0/0
0 0 DROP all -- * * 83.100.226.60 0.0.0.0/0

Chain LSI (2 references)
pkts bytes target prot opt in out source destination
3 144 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
3 144 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
3 144 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Outbound '
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable

Chain OUTBOUND (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
1463 193K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
186 8312 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Please check if the above printed iptables rules are correct!

* moblock is running, pid is 6321.

Possibly by uninstalling firestarter might solve the problem.

jre

May 29th, 2008, 01:47 PM

The moblock_in etc. rules should be placed at the head of the INPUT etc. chains (not at the bottom as in your case).
This will be the case directly after "moblock-control restart". Did you execute this command before the "status" command? Were there any messages? What's in /var/log/moblock-control.log?

ApUUbunU

May 29th, 2008, 05:43 PM

Oddly enough, after a system restart and uninstalling Firestarter, Moblock now works. However, I don't know why. The output of "status" was after restarting Moblock, and I don't recall there being any messages, though I might have forgotten.

The output of the log, before the restart was

Got SIGTERM! Dumping stats and exiting.
Duplicated range ( Bogo )
Ranges loaded: 242165
Merged ranges: 0
Skipped useless ranges: 0
NFQUEUE: binding to queue '0'

Now the output is the same, except with adresses blocked.

Here is the current output of the status command:

Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 1437 packets, 1341K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
24 22874 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain OUTPUT (policy ACCEPT 1217 packets, 147K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
97 5850 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 192.168.0.0/24
0 0 RETURN all -- * * 192.168.0.0/24 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
19 22173 RETURN all -- * * 192.168.0.0/24 0.0.0.0/0
5 701 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 66.114.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 194.109.137.218
0 0 RETURN all -- * * 0.0.0.0/0 66.150.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 130.57.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 69.31.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 207.46.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 64.4.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 65.55.0.0/16
0 0 RETURN all -- * * 0.0.0.0/0 65.54.0.0/16
12 750 RETURN all -- * * 0.0.0.0/0 192.168.0.0/24
85 5100 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Please check if the above printed iptables rules are correct!

* moblock is running, pid is 6233.

The moblock_in rules are still at the bottom of the INPUT etc. chains, but certain IPs are still being blocked. I assume that there must be another cause.

jre

May 30th, 2008, 03:41 PM

So what I meant to say is:
Every rule in the INPUT chain that is before moblock_in will be processed before the packets get to MoBlock.
You have the targets ACCEPT, DROP and other chains. Other chains themselves do the same: they ACCEPT, DROP or send packets back to INPUT. So we only need to look at ACCEPT and DROP:

If a packet will be DROPped anyway it doesn't matter if it is checked by MoBlock.
But if it gets ACCEPTed it will leave any further iptables processing, so it will not be checked by MoBlock.

Therefore you have to make sure that ACCEPT rules are only before MoBlock if they accept traffic that is not intended to be checked by MoBlock.

This is the INPUT chain you posted first:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 192.168.0.1 0.0.0.0/0 tcp flags:!0x17/0x02
14 1729 ACCEPT udp -- * * 192.168.0.1 0.0.0.0/0
1 576 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 DROP all -- wlan0 * 0.0.0.0/0 255.255.255.255
0 0 DROP all -- * * 0.0.0.0/0 192.168.0.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
1595 1011K INBOUND all -- wlan0 * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Input'
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
As you see there are many rules which ACCEPT traffic or send traffic to chains which contain an ACCEPT before your moblock_in. moblock_in should be the first or second rule in this chain.

The case in your second post is better:
Chain INPUT (policy ACCEPT 1437 packets, 1341K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
24 22874 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW

One rule is before MoBlock and this rule simply accepts all traffic on the loopback device, which is ok.

So this was the long version of what I meant to say with "the moblock_in rule has to be at the head of the chain and not at the bottom".

Notes:
Since Moblock 0.9 with the MARKing feature traffic that is accepted by MoBlock is not ACCEPTed (in the sense that it will leave the iptables processing) but "marked accepted" which means that it will be processed by the other iptables rules.
(To be correct: the packets repeat the whole chain/hook function).
Up to MoBlock 0.8 traffic was ACCEPTed, this is the reason why 0.8 did not work with firestarter.

The above said is of course valid for OUTPUT and FORWARD, too.
jre

ApUUbunU

May 31st, 2008, 08:35 AM

Great, I now understand what you meant, and how the second post is better.

Thanks a lot for your explanation, and also for Moblock, its a great program!

alonecity

May 31st, 2008, 05:07 PM

@ alonecity:
I need answers to these questions, too:

Is 192.168.200.0/24 your LAN (in doubt post the output of sudo ifconfig)? If not, then you should whitelist your LAN.

jre:
I don't have any web browsing at all. 192.168.200.xxx is indeed my lan

eth0 Link encap:Ethernet HWaddr 00:14:22:54:4e:6b
inet addr:192.168.200.101 Bcast:192.168.200.255 Mask:255.255.255.0
inet6 addr: fe80::214:22ff:fe54:4e6b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:31932 errors:0 dropped:0 overruns:0 frame:0
TX packets:19232 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:44011705 (41.9 MB) TX bytes:1664221 (1.5 MB)
Interrupt:18 Base address:0xa000

Thank you

Edit: put the right tags.

jre

June 1st, 2008, 05:59 AM

I had a closer look at your iptables rules now. (Note: Please put them in CODE tags, it's a pain to read them this way).

Now I saw that you use IPList/IPBlock and MoBlock at the same time - don't do this, just use one of both, they have the same functionality.

There are two occassions where they conflict:

- They both bind to NFQUEUE, although IPList does not use the default QUEUE number (0) there still might occur problems.

- They both mark packets. I'm not sure if these MARKs are additional or replace each other.

I've just added a Conflict: iplist to the moblock package so that apt will refuse to install both at the same time.

jre

alonecity

June 1st, 2008, 08:13 AM

Thanks jre. I thought I had uninstalled IPlist properly but I went through an uninstall/reinstall/uninstall of IPlist and uninstal/reinstall for Moblock and it seems to be working now.

Doctoxic

June 3rd, 2008, 04:52 PM

Hi

Hope you can help - am not a linux expert and know little about firewalls etc but here goes - hope you can help

Ok - i know i am doing something wrong here - situation so far is:

1) installed moblock through synaptic - following the instructions on the Ubuntu docs page am using ubuntu 8.04

I know this from the readme:
In the default configuration MoBlock starts at system boot and some preconfigured blocklists are updated once a day. You can specify the blocklists to use in /etc/moblock/blocklists.list. Everything else (automatic start and update, iptables handling, IP and port whitelisting) is configured in /etc/moblock/moblock.conf. This is important especially if MoBlock blocks sites that it should not block.

2) So i edited the /etc/default/moblock file to include this WHITE_TCP_OUT="http https" and then restart moblock

BUT it still seems to block everything

Can anyone tell me what i need to do to get browsing and ftp to work whilst still running moblock? I tried mobloquer which is a GUI but even using that it doesn't unblock stuff - very odd

does this help?

sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 3382 packets, 764K bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain OUTPUT (policy ACCEPT 3376 packets, 299K bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

I have firestarter installed but am totally confused as to whether the firewall works all the time or only when i start the Firestarter GUI

hope you can help

many thanks

doc

jre

June 4th, 2008, 11:37 AM

belgofac

June 6th, 2008, 09:13 PM

Hi JRE, All,

I have been running Moblock for a while on Linux Mint Daryna but new distro Mint Elyssa (Hardy based) = new problems.
I use Firestarter as firewall.

I installed Moblock and it worked straight out of the box. For a while. I had to adjust moblock.conf and used the same settings as before.
Then moblock did not want to start at all anymore.

Status:

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.0.1 0.0.0.0/0 tcp flags:!0x17/0x02
35 7185 ACCEPT udp -- * * 192.168.0.1 0.0.0.0/0
60 2520 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 0 limit: avg 1/sec burst 5
0 0 LSI udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:33434
0 0 LSI icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- eth0 * 0.0.0.0/0 255.255.255.255
10 2505 DROP all -- * * 0.0.0.0/0 192.168.0.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
602 522K INBOUND all -- eth0 * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Input'

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 0 limit: avg 1/sec burst 5
0 0 LSI udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:33434
0 0 LSI icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Forward'

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.0.2 192.168.0.1 tcp dpt:53
41 2545 ACCEPT udp -- * * 192.168.0.2 192.168.0.1 udp dpt:53
60 2520 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
2 136 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
574 44221 OUTBOUND all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Output'

Chain INBOUND (1 references)
pkts bytes target prot opt in out source destination
602 522K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 LSI all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination

Chain LSI (6 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Outbound '
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable

Chain OUTBOUND (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
518 39692 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
56 4529 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain moblock_fw (0 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_in (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 64.15.112.0 0.0.0.0/0
0 0 RETURN all -- * * 192.168.0.0/16 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_out (0 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Please check if the above printed iptables rules are correct!

* moblock is not running.

Moblock-control.log:

[sudo] password for eddy:
YAHOOZ-060921002953:75.35.59.144-75.35.59.151
YAHOOZ-061003013011:75.41.158.152-75.41.158.159
YAHOOZ-070828170428:76.246.182.152-76.246.182.159
Installing blocklist to /etc/moblock/guarding.p2p [ OK ]
* MoBlock is not running.
2008-06-07 10:44:00 EST End: moblock-control update
2008-06-07 10:44:16 EST Begin: moblock-control start
Inserting iptablesiptables v1.3.8: host/network `-' not found
Try `iptables -h' or 'iptables --help' for more information.
[fail]
2008-06-07 11:00:23 EST Begin: moblock-control reload
Building blocklist [ OK ]
Removing lines containing the following regular expressions from the blocklist:
google
yahoo
altavista
debian
sourceforge
Removed the following lines:
add2.dir.scd.yahoo.com ads:66.218.70.227-66.218.70.227
BOGDAN_LUCIAN_CRISTIAN-YAHOOCOM:208.98.12.0-208.98.12.63
Cuyahooga County Bar Assoc:66.73.60.72-66.73.60.79
extads1.vip.ukl.yahoo.com ads:217.12.4.96-217.12.4.96
gigenfu@yahoo.com.tw:218.210.18.64-218.210.18.71
GOOGLE-NL:213.19.160.192-213.19.160.207
GOOGLE/PLANET LABS:208.185.40.192-208.185.40.223
GOOGLE/PLANET LABS:208.185.4.128-208.185.4.159
GOOGLE/PLANET LABS:208.185.42.96-208.185.42.127
NTT Com/SOL/VTF/EH/Sony/Google:157.238.217.32-157.238.217.39
rd1.vip.ukl.yahoo.com ads:217.12.6.21-217.12.6.21
Savvis-Sourceforge Split1 Start Range:66.35.192.0-66.35.249.255
Savvis Sourceforge Split2 End Range:66.35.251.0-66.35.255.255
sexymagnet.com/p2w1.geo.scd.yahoo.com]:66.218.79.157-66.218.79.157
SNET TEST YAHOO 01:66.159.160.136-66.159.160.143
SNET TEST YAHOO 02:66.159.160.144-66.159.160.151
SNET TEST YAHOO 03:66.159.160.152-66.159.160.159
SNET TEST YAHOO 04:66.159.160.160-66.159.160.167
SNET TEST YAHOO 05:66.159.160.168-66.159.160.183
SNET TEST YAHOO 06:66.159.160.184-66.159.160.191
SNET TEST YAHOO 07:66.159.160.192-66.159.160.199
SNET TEST YAHOO 09:66.159.160.208-66.159.160.215
SNET TEST YAHOO 10:66.159.160.216-66.159.160.223
SNET TEST YAHOO 11:66.159.160.224-66.159.160.231
SNET TEST YAHOO 3004:64.252.30.112-64.252.30.119
SNET TEST YAHOO:64.252.30.80-64.252.30.111
SNET TEST YAHOO:66.159.160.200-66.159.160.207
SNET TEST YAHOO:66.159.160.232-66.159.160.255
SNET TEST YAHOO:66.159.160.32-66.159.160.39
SNET TEST YAHOO:66.159.160.8-66.159.160.23
SNET TEST YAHOO:66.159.185.0-66.159.185.47
Software in the Public Interest / Debian:194.109.137.216-194.109.137.223
Taiwan Yahoo Electric Co., Ltd:203.74.105.88-203.74.105.95
Tonghua Yahoo Netbar,Kuaida Town , Tonghua City,:218.62.120.236-218.62.120.239
Tor.debian40etch64minim:88.198.17.116-88.198.17.116
tsaisuntech@yahoo.com:220.228.117.128-220.228.117.135
yahoo fraud scammer:68.195.62.40-68.195.62.40
YAHOOPC:218.233.116.192-218.233.116.255
yahoo scammer:4.65.105.109-4.65.105.109
Yahoo Software Development India Pvt. Ltd:203.145.181.48-203.145.181.63
YAHOOZ-060921002953:75.35.59.144-75.35.59.151
YAHOOZ-061003013011:75.41.158.152-75.41.158.159
YAHOOZ-070828170428:76.246.182.152-76.246.182.159
Installing blocklist to /etc/moblock/guarding.p2p [ OK ]
* MoBlock is not running.
2008-06-07 11:00:33 EST End: moblock-control reload
2008-06-07 11:00:54 EST Begin: moblock-control restart
Deleting iptablesiptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: Bad rule (does a matching rule exist in that chain?)
* Some iptables rules could not be deleted. The most common reason for this is
* that they did not exist. If MoBlock was not running this is the correct
* behaviour. But if MoBlock was running there is some problem. Make sure that
* MoBlock inserts its iptables rules correctly and that other software, e.g.
* firewall applications, don't delete them. Make sure that MoBlock is started
* after other firewall applications.
Stopping MoBlock [fail]
Inserting iptablesiptables v1.3.8: host/network `-' not found
Try `iptables -h' or 'iptables --help' for more information.

I have tried to delete and re-install but that didn't work either.

I have ben fiddling a bit more and it looks like the remove and re-install did not work properly:

[sudo] password for eddy:
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 17 not upgraded.
Need to get 0B/59.6kB of archives.
After this operation, 0B of additional disk space will be used.
Do you want to continue [Y/n]? y
(Reading database ... 87966 files and directories currently installed.)
Preparing to replace moblock 0.9~rc2-11~hardy (using .../moblock_0.9~rc2-11~hardy_i386.deb) ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: warning - old pre-removal script returned error exit status 3
dpkg - trying script from the new package instead ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: error processing /var/cache/apt/archives/moblock_0.9~rc2-11~hardy_i386.deb (--unpack):
subprocess new pre-removal script returned error exit status 3
* Starting MoBlock moblock invoke-rc.d: initscript moblock, action "start" failed.
dpkg: error while cleaning up:
subprocess post-installation script returned error exit status 8
Errors were encountered while processing:
/var/cache/apt/archives/moblock_0.9~rc2-11~hardy_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code

So, I can not uninstall or re-install it.

Tried a apt-get -f install but the same thing:

eddy@eddy-mint2 ~ $ sudo apt-get -f install
Reading package lists... Done
Building dependency tree
Reading state information... Done
Correcting dependencies... Done
The following extra packages will be installed:
libnetfilter-queue1 libnfnetlink0
The following NEW packages will be installed:
libnetfilter-queue1 libnfnetlink0
0 upgraded, 2 newly installed, 0 to remove and 17 not upgraded.
1 not fully installed or removed.
Need to get 0B/78.9kB of archives.
After this operation, 139kB of additional disk space will be used.
Do you want to continue [Y/n]? y
Selecting previously deselected package libnfnetlink0.
(Reading database ... 87954 files and directories currently installed.)
Unpacking libnfnetlink0 (from .../libnfnetlink0_0.0.30-2_i386.deb) ...
Selecting previously deselected package libnetfilter-queue1.
Unpacking libnetfilter-queue1 (from .../libnetfilter-queue1_0.0.13-1_i386.deb) ...
Selecting previously deselected package moblock.
Preparing to replace moblock 0.9~rc2-11~hardy (using .../moblock_0.9~rc2-11~hardy_i386.deb) ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: warning - old pre-removal script returned error exit status 3
dpkg - trying script from the new package instead ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: error processing /var/cache/apt/archives/moblock_0.9~rc2-11~hardy_i386.deb (--unpack):
subprocess new pre-removal script returned error exit status 3
* Starting MoBlock moblock invoke-rc.d: initscript moblock, action "start" failed.
dpkg: error while cleaning up:
subprocess post-installation script returned error exit status 8
Errors were encountered while processing:
/var/cache/apt/archives/moblock_0.9~rc2-11~hardy_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

Any idea?

Sef

June 6th, 2008, 10:50 PM

Moved to Debian: Other OS talk.

Doctoxic

June 7th, 2008, 11:02 AM

I guess you need to whitelist your LAN, including your router, too. If you don't know your local IP check it with "sudo ifconfig". It's the value after "inet addr:" of the interface that you use for networking. For wired connections that might be "eth0", for wireless connections "wlan0".

Example: You found out that your IP is 192.168.0.39. Then your LAN will most probably cover the IP range 192.168.0.1-192.168.0.255. Then whitelist this range with the following lines in /etc/default/moblock:
WHITE_IP_IN="192.168.0.0/24"
WHITE_IP_OUT="192.168.0.0/24"

After editing and a "moblock-control restart" you should be fine. Of course you can also do this with mobloquer.

firestarter is not a firewall itself but it just sets up the Linux firewall: iptables. All your iptables rules do belong to moblock, so there is no conflict.

Thanks for posting your iptables rules, that saved me some questions.

Greets
jre

thanks very much jre - thats sorted it

did i miss something in the readme or was this info missing (or maybe not written for a non linux expert?) Seems it would save you a lot of time if the readme's were aimed more at us noobs :D

i had previously tried mobloquer - it just didn't work (odd because it used to before i upgraded to Heron)

does running the firestarter gui activate the firewall? - only it started blocking my bittorrent port - easily fixed but annoying (sorry i know firestarter is not what you're supporting her)

Doc

belgofac

June 8th, 2008, 09:42 PM

Do not worry about it anymore.

For others who run into the same uninstall problems posted and tried everything to uninstall moblock without success:

rm -rf everything to do with moblock like /etc/moblock etc...

You will get a message at boot telling you to click "fix broken packages" but that didn't work either so just continue with the boot.

I installed Ipblock instead without any problems.

I still have moblock running with Mint Daryna, so thanks for all your work guys.

jre

June 9th, 2008, 12:54 PM

Moved to Debian: Other OS talk.
No, that's definitely the wrong forum. This thread is targeted at Ubuntu users like the HOWTO https://help.ubuntu.com/community/MoBlock.
It's there so that Ubuntu users can ask me questions and make development questions. (Yes, I'm a Debian user, but this has nothing to do with this thread).
I'm not sure if the network forum was well chosen, so move it wherever you think is correct. Thanks for your work.

Edit 2008-06-11: We were moved to
Ubuntu Forums > The Ubuntu Forum Community > Other Community Discussions > Tutorials & Tips
Thanks, Sef

did i miss something in the readme or was this info missing (or maybe not written for a non linux expert?) Seems it would save you a lot of time if the readme's were aimed more at us noobs :D
Where did you read? I'm currently working on improving the documentation on two places:

- debconf questions: they interact with the user during installation, give warnings, explanations and allow to configure moblock. If you want to help me please download the current preview package from moblock-deb.sf.net/preview/ and tell me if my language there is clear and helpful for a non-tech person. This would be a great help!

- the wiki at https://help.ubuntu.com/community/MoBlock

does running the firestarter gui activate the firewall? - only it started blocking my bittorrent port - easily fixed but annoying (sorry i know firestarter is not what you're supporting her)
If you "start" firestarter the configured iptables rules will be inserted. So just check with "iptables -L -nv" before and after starting firestarter what happens.

Doctoxic

June 9th, 2008, 01:33 PM

thanks jre

i read the wiki - which does not contain the info in your post (well not specific enough for the likes of me)

thanks again for all your help with this

doc

jre

June 9th, 2008, 03:09 PM

thanks jre

i read the wiki - which does not contain the info in your post (well not specific enough for the likes of me)

thanks again for all your help with this
Now it does. If you miss something please tell me.
jre

yipperzz

June 22nd, 2008, 01:01 PM

Getting an error when trying to stop the service. It says fail. But if I try to restart it works fine.

xxx@xxx:~$ sudo moblock-control stop
* Stopping MoBlock moblock [fail]

xxx@xxx:~$ sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 12380 packets, 14M bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 8134 packets, 555K bytes)
pkts bytes target prot opt in out source destination

Please check if the above printed iptables rules are correct!

* moblock is running, pid is 5430.

So it looks like it's running, I believe. But why can't it stop? Is there anything I need to look at?

Also if I kill pid 5430 and do a start command, it says that it's starting but when I give it a few minutes and run status it says that moblock is not running. Same for restart.

And is there a way to view what is being blocked real time? Or do you have to just go through the logs? Or would I need mobloquer? Just wondering as I'm going from peerguardian on XP and would like to get something running on my Linux box. Sorry if the questions. I didn't see much documentation on the website other than how to install moblock. Thanks for your help.

Edit: I just saw the tail -f /var/log/moblock.log command to view real time. But it's not working at the moment since moblock isn't running :P
Edit2: FYI I'm not running any software firewall.

yipperzz

June 22nd, 2008, 05:21 PM

Well now that I had a chance to reboot, moblock isn't running anymore when I check the status. If I try to start or restart, it still won't run.

Edit: I got it to work. I edited the moblock.conf file incorrectly. I thought that it said that you could put the ip range in the whitelist, So I did 192.168.11.1-192.168.11.255. I changed it to 192.168.11.0/24 and it's working now. Also, I may have added a space in that range too. I don't remember it since I changed it. Now it's working as it should. Sorry about that.

jre

June 23rd, 2008, 12:08 PM

Edit: I got it to work. I edited the moblock.conf file incorrectly. I thought that it said that you could put the ip range in the whitelist, So I did 192.168.11.1-192.168.11.255. I changed it to 192.168.11.0/24 and it's working now. Also, I may have added a space in that range too. I don't remember it since I changed it. Now it's working as it should. Sorry about that.
Glad to hear it's working now. For future reference: Have a look at /var/log/moblock-control.log, there errors get explained or at least logged.

For all who are interested:
I've put preview packages at moblock-deb.sf.net/preview with some nice new things:
- allow-list with support for ip-ranges (as yipperzz thought)
- debconf support (graphical configuration during installation and at every later time)
- log to syslog the port a blocked packet was sent on
- automatic whitelisting of the LAN

I'd appreciate every feedback. Next to bugreports (sigh ...) I'm particularly interested in feedback for the debconf part: is it useful? Do you understand it? Are there open questions? To technical?
If everything is perfect a short notice would be nice, too.

jre

Bauldrick

June 24th, 2008, 02:44 PM

I can't get your latest to install (r-12). I'm building my own package mind, on a powerpc NAS. Previous one installs, but this goes through the questions (which makes it alot better by the way) and then gives dpkg error.
I've probably made a mistake in how to build it though, this is what I did:

mkdir moblock
cd moblock
sudo apt-get build-dep -y moblock
wget http://moblock-deb.sourceforge.net/preview/moblock-0.9~rc2-12.source.tgz
tar zxvf moblock*
cd moblock-*
dpkg-buildpackage -rfakeroot
cd ..
sudo dpkg -i moblock*.deb

Like I say, it's probably me, it starts to install and I answer all questions but then it fails to install after that.

jre

June 27th, 2008, 01:00 PM

Like I say, it's probably me, it starts to install and I answer all questions but then it fails to install after that.
What output do you get during your failed install? What's in /var/log/moblock-control.log and .../moblock.log?

I can install this version just fine here, but maybe I changed something manually during development which isn't represented in the source ...

Thanks for the feedback!!

Bauldrick

June 28th, 2008, 06:59 AM

Heres the error:

dpkg: error processing moblock (--install):
subprocess post-installation script returned error exit status 10
Processing triggers for man-db ...
Errors were encountered while processing:
moblock

nothing really in /var/log/moblock-control.log

2008-06-28 11:20:30 BST End: moblock-control stop

and moblock.log

Sat Jun 28 11:20:29| Got SIGTERM! Dumping stats and exiting.

On a completely different note, on my little machine when moblock starts the cpu gets hammered for 2-3 minutes. top shows 92-97%

jre

June 28th, 2008, 06:57 PM

"exit status 10" is not of moblock-control.
I can merely guess that this results from "dash" being the default shell on ubuntu, while on Debian it's still "bash". I had a similar problem just now here after I changed to dash.
You may try it again by changing in your moblock-0.9~rc2/debian/postinst the first line to #!/bin/bash and then rebuild the package.

The high CPU usage might result from MoBlock loading the blocklist and merging overlapping/duplicate ranges. I guess your NAS has low CPU power? IIRC on my Pentium 3, 800 MHz it took me about 30 secs to start up.
Anyway, there's a clone of MoBlock (NFBlockD (http://makovick.googlepages.com/nfblockddaemon) ) which is less resource intensive, but for now I will do nothing about that.

Finally, nice to hear that you have (had) it running on a PowerPC NAS!!

sleepitoff

July 6th, 2008, 11:58 AM

I just installed Moblock-nfq on a fresh install of Hardy and am having a problem here. I was adding and removing custom blocklists to /etc/moblock/blocklists.list and when I ran sudo moblock-control reload I get the message '...fail!'

All moblock-control commands fail now (start, stop, update, etc)

What can I do here? I don't want to try uninstalling moblock via synaptic out of fear something will get messed up.

Help?

here's the moblock-control.log

2008-07-06 10:28:32 AM CDT Begin: /usr/bin/moblock-control reload
Building blocklist * Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Check your /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-07-06 10:28:32 AM CDT Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz * .
* Blocklists updated.
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
* MoBlock is not running.
2008-07-06 10:29:05 AM CDT End: /usr/bin/moblock-control update
2008-07-06 10:29:05 AM CDT Begin: /usr/bin/moblock-control start
Inserting iptables ...done.
Starting MoBlock ...done.
2008-07-06 10:29:06 AM CDT End: /usr/bin/moblock-control start
2008-07-06 10:30:56 AM CDT Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz * . No update available.
* Blocklists updated.
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
Reloading MoBlock ...done.
2008-07-06 10:31:26 AM CDT End: /usr/bin/moblock-control update
2008-07-06 10:37:48 AM CDT Begin: /usr/bin/moblock-control reload
Building blocklist [31m*[39;49m Error 6: http://www.bluetack.co.uk/config/level1.gz not available. Check your /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-07-06 10:37:55 AM CDT Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz * . No update available.
Updating level1.gz * .
Updating ads-trackers-and-bad-pr0n.gz * .
Updating spyware.gz * .
Updating spider.gz * .
* Blocklists updated.
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
Reloading MoBlock ...done.
2008-07-06 10:39:41 AM CDT End: /usr/bin/moblock-control update
2008-07-06 10:41:46 AM CDT Begin: /usr/bin/moblock-control reload
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 10:41:46 AM CDT End: /usr/bin/moblock-control reload
2008-07-06 10:42:06 AM CDT Begin: /usr/bin/moblock-control stop
Deleting iptables ...done.
Stopping MoBlock/sbin/start-stop-daemon: warning: failed to kill 22565: No such process
...fail!
2008-07-06 10:42:06 AM CDT End: /usr/bin/moblock-control stop
2008-07-06 10:42:17 AM CDT Begin: /usr/bin/moblock-control restart
Deleting iptables ...fail!
Stopping MoBlock/sbin/start-stop-daemon: warning: failed to kill 22565: No such process
...fail!
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 10:42:21 AM CDT End: /usr/bin/moblock-control restart
2008-07-06 10:43:29 AM CDT Begin: /usr/bin/moblock-control reload
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 10:43:29 AM CDT End: /usr/bin/moblock-control reload
2008-07-06 10:45:05 AM CDT Begin: /usr/bin/moblock-control stop
Deleting iptables ...fail!
Stopping MoBlock/sbin/start-stop-daemon: warning: failed to kill 22565: No such process
...fail!
2008-07-06 10:45:05 AM CDT End: /usr/bin/moblock-control stop
2008-07-06 10:48:22 AM CDT Begin: /usr/bin/moblock-control stop
Deleting iptables ...fail!
Stopping MoBlock/sbin/start-stop-daemon: warning: failed to kill 22565: No such process
...fail!
2008-07-06 10:48:22 AM CDT End: /usr/bin/moblock-control stop
2008-07-06 10:55:20 AM CDT Begin: /usr/bin/moblock-control reload
Building blocklist ...done.
Installing blocklist to /etc/moblock/ipfilter.dat ...done.
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 10:55:20 AM CDT End: /usr/bin/moblock-control reload
2008-07-06 11:07:05 AM CDT Begin: /usr/bin/moblock-control stop
Deleting iptables ...fail!
Stopping MoBlock/sbin/start-stop-daemon: warning: failed to kill 22565: No such process
...fail!
2008-07-06 11:07:05 AM CDT End: /usr/bin/moblock-control stop
2008-07-06 11:07:05 AM CDT Begin: /usr/bin/moblock-control start
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 11:07:05 AM CDT End: /usr/bin/moblock-control start
2008-07-06 11:07:20 AM CDT Begin: /usr/bin/moblock-control start
[31m*[39;49m MoBlock has some strange status.
[31m*[39;49m Try "moblock-control stop". Otherwise kill all moblock processes,
[31m*[39;49m delete /var/run/moblock.pid and all iptables rules related to MoBlock.
2008-07-06 11:07:20 AM CDT End: /usr/bin/moblock-control start

jre

July 7th, 2008, 12:26 PM

You mixed blocklists of different formats. Either use nipfilter.dat.gz or
level1.gz/ads-trackers-and-bad-pr0n.gz/spyware.gz/spider.gz.

If you want to use nipfilter.dat:
- set BLOCKLIST_FORMAT="d" in /etc/moblock/moblock.conf.
- Don't use the other lists
- Note that level1 is already part of nipfilter.dat. Please have a look at /usr/share/doc/moblock/README.blocklists.gz to learn more about these blocklists.

If you want to use the other lists (I suggest this solution):
- First of, install the "moblock" package instead of "moblock-nfq". In moblock-nfq there's a bug when using multiple lists (but this bug is not the reason for your current problems).
- Keep the setting BLOCKLIST_FORMAT="p" in /etc/moblock/moblock.conf
- Don't use nipfilter.dat at the same time.

I guess when you have fixed this setup MoBlock will work again.

jre

jre

July 14th, 2008, 01:44 PM

New MoBlock (0.9~rc2-13) packages:

debconf support added
port 80 and 443 whitelisted per default again
LAN traffic automatically whitelisted (experimental)
port logging
hopefully removed all bashisms

Have fun.

I have not made a separate file release of moblock-control, yet. Contact me if you want one now.

The development repository is still not updated.

Heres the error:

dpkg: error processing moblock (--install):
subprocess post-installation script returned error exit status 10
Processing triggers for man-db ...
Errors were encountered while processing:
moblock

This is also solved. I had removed a variable at one place but kept it at another :-/
Sorry that it took me so long to tell you this

jre

Dawa

July 18th, 2008, 05:22 PM

I'm not sure if this is Moblock or Bluetack, but every time I update, the log says "no update available", for every list. This has been going on for like a week. I tried manually deleting the lists in /var/spool/moblock and re-downloading them, but the blocked IP ranges number stays the same.

any ideas?

jre

July 19th, 2008, 07:17 AM

I'm not sure if this is Moblock or Bluetack, but every time I update, the log says "no update available", for every list.
Please post your /etc/moblock/blocklists.list.
AFAIK the [n|p]ipfilter.dat list is updated only at a weekly basis. While the single lists (level1.gz et al.) are updated daily or even at a higher frequency. For the latter it's important to use "moblock" not "moblock-nfq" or "moblock-ipq".

greets
jre

Dawa

July 19th, 2008, 08:09 AM

# blocklists.list - lists the blocklists used by moblock-control
#
# Place one URL per line for every blocklist. Any line which starts with a
# (hash) is a comment and is ignored.
#
# All lists have to be in the same blocklist format. This format has to be
# specified in moblock.conf.
# The name of the blocklist has to be the same as the basename of the URL, i.e.
# php redirects are not possible.
#
# If the remote server doesn´t support timestamping start the line with
# "notimestamp". Don´t abuse this. This is only necessary if the remote
# server doesn´t provide timestamping (Error 400).
#
# For local blocklists start the line with "locallist".
#
# Have a look at /usr/share/doc/moblock/README.blocklists.gz for some
# available blocklists.
#
# Do a "moblock-control update" when you have edited this file.
#
www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz
www.bluetack.co.uk/config/bogon.gz
www.bluetack.co.uk/config/dshield.gz
www.bluetack.co.uk/config/edu.gz
www.bluetack.co.uk/config/fornonlancomputers.gz
www.bluetack.co.uk/config/hijacked.gz
www.bluetack.co.uk/config/iana-multicast.gz
www.bluetack.co.uk/config/iana-private.gz
www.bluetack.co.uk/config/iana-reserved.gz
www.bluetack.co.uk/config/level1.gz
www.bluetack.co.uk/config/level2.gz
www.bluetack.co.uk/config/level3.gz
www.bluetack.co.uk/config/Microsoft.gz
www.bluetack.co.uk/config/proxy.gz
www.bluetack.co.uk/config/rangetest.gz
www.bluetack.co.uk/config/spider.gz
www.bluetack.co.uk/config/spyware.gz
www.bluetack.co.uk/config/templist.gz
#
#locallist /etc/moblock/custom-blocklist.p2p

that's my blocklists.list. looks normal, i think..

jre

July 19th, 2008, 08:41 AM

I invested this a bit further. Since 2008-07-14 there are indeed no updates.
I started a thread at bluetack, see here:
http://www.bluetack.co.uk/forums/index.php?showtopic=18899

Dawa

July 19th, 2008, 08:43 AM

thanks, jre. they really should have a "last updated" type of deal somewhere on their site. Now I feel bad about gobbling up their bandwidth in a panic. :D

Bauldrick

July 21st, 2008, 07:11 AM

This is also solved. I had removed a variable at one place but kept it at another :-/
Sorry that it took me so long to tell you this

Ta !! But I get 404 error on preview address on moblock site?

Look forward to trying to get it to work again

jre

July 21st, 2008, 12:27 PM

The preview is removed because the preview has been released.
So just install it normally.
jre

cnschulz

August 8th, 2008, 06:34 AM

Hi,

Im a noob trying to install Moblock... Im running headless hardy and im doing a fresh install with all defaults. Any help in solving the install/config issues is appreciated.

c.

apt-get install moblock
<snip>
Setting up moblock (0.9~rc2-16~hardy) ...
* Reloading MoBlock moblock ... failed.
<snip>
Errors were encountered while processing:
moblock
E: Sub-process /usr/bin/dpkg returned an error code (1)

-----

The log contains the following:

2008-08-08 20:14:22 EST Begin: /usr/bin/moblock-control reload
Building blocklist [31m*[39;49m Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Check your /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-08-08 20:14:22 EST Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz [31m*[39;49m Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Aborting!
2008-08-08 20:14:58 EST Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz [31m*[39;49m Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Aborting!
2008-08-08 20:15:14 EST Begin: /usr/bin/moblock-control start
[31m*[39;49m Error 6: /etc/moblock/ipfilter.dat not installed, not starting MoBlock!
2008-08-08 20:15:34 EST Begin: /usr/bin/moblock-control stop
Deleting iptables ...fail!
Stopping MoBlock ...fail!
2008-08-08 20:15:34 EST End: /usr/bin/moblock-control stop
2008-08-08 20:16:28 EST Begin: /usr/bin/moblock-control reload
Building blocklist [31m*[39;49m Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Check your /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-08-08 20:16:28 EST Begin: /usr/bin/moblock-control update
Updating blocklists ...
Updating nipfilter.dat.gz [31m*[39;49m Error 6: www.bluetack.co.uk/config/nipfilter.dat.gz not available. Aborting!
2008-08-08 20:16:53 EST Begin: /usr/bin/moblock-control stop
Deleting iptables ...fail!
Stopping MoBlock ...done.
2008-08-08 20:16:53 EST End: /usr/bin/moblock-control stop
2008-08-08 20:27:53 EST Begin: moblock-control reload
Building blocklist [31m*[39;49m Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Check the /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-08-08 20:27:53 EST Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gzrm: cannot remove `ads-trackers-and-bad-pr0n.gz': No such file or directory
[31m*[39;49m Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Aborting!
2008-08-08 20:28:33 EST Begin: moblock-control reload
Building blocklist [31m*[39;49m Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Check the /etc/moblock/blocklists.list and try a "moblock-control update" first. Aborting!
2008-08-08 20:28:33 EST Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gzrm: cannot remove `ads-trackers-and-bad-pr0n.gz': No such file or directory
[31m*[39;49m Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Aborting!

jre

August 10th, 2008, 11:44 AM

during installation it is necessary to download the blocklists. Somehow this fails, but maybe it was only a temporary problem and everything is already working as it should.
To fix it manually do the following.
Download the missing list, please note that after fixing this, moblock-control might complain about the next missing list, so you might have to repeat the step for them, too.
wget www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz
sudo cp ads-trackers-and-bad-pr0n.gz /var/spool/moblock/used/.

I changed the code so that the logfile is more informational about this in the future. So there was a bug to be fixed but this bug wa not the reason for your problems.

Thanks
jre

cnschulz

August 10th, 2008, 07:07 PM

pardon my (possible) ignorance but all the files from bluetrack seem to be empty.. ie zero bytes. even through the browser of manual wget.

am i doing something wrong? could someone verify my claim?

c.

uljanow

August 10th, 2008, 07:22 PM

Bluetack seems to have some problems. But there is a mirror on http://iplist.sourceforge.net/mirror/

cnschulz

August 10th, 2008, 08:01 PM

Thanks for your help,

I have it working now with a manual get of level1.gz only (php redirects not implemented)

The mirror site only has 5 config files available. It seems that bluetrack has none!!

Ill set the .list file back to defaults and see what happens... better than nothing i guess.

Any other suggestions? What are other users encountering/doing?

oh... and thanks for your help... again...

c.

jre

August 11th, 2008, 12:23 PM

The blocklist update problems seem to be over:

/etc/cron.daily/moblock:
Updating blocklists and reloading MoBlock: moblock.

The following lists were updated:
www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz of 2008-08-10 19:24
www.bluetack.co.uk/config/bogon.gz of 2008-08-10 19:27
www.bluetack.co.uk/config/dshield.gz of 2008-08-10 19:10
www.bluetack.co.uk/config/hijacked.gz of 2008-08-10 19:25
www.bluetack.co.uk/config/level1.gz of 2008-08-10 19:27
www.bluetack.co.uk/config/level2.gz of 2008-08-10 19:24
www.bluetack.co.uk/config/Microsoft.gz of 2008-08-10 19:10
www.bluetack.co.uk/config/proxy.gz of 2008-08-10 19:30
www.bluetack.co.uk/config/templist.gz of 2008-08-10 19:25

For the following lists there was no update available:
www.bluetack.co.uk/config/fornonlancomputers.gz of 2008-08-04 16:03
www.bluetack.co.uk/config/iana-multicast.gz of 2008-08-04 16:03
www.bluetack.co.uk/config/iana-private.gz of 2008-08-04 16:03
www.bluetack.co.uk/config/iana-reserved.gz of 2008-08-04 16:03

I'm glad to tell that this problem didn't affect users who already had once downloaded the lists successfully but only first time installers.

suprfish

August 13th, 2008, 09:24 PM

Hi,

I'm having some trouble with mobloquer, installed from the moblock-deb repositories. It won't start; when started from the terminal, it drops the message "Segmentation fault." Any help is appreciated :KS

jre

August 14th, 2008, 03:47 PM

Huh, I'm not so savvy with mobloquer. Is there anything more than this message? Which version are you using (dpkg -l mobloquer)

suprfish

August 14th, 2008, 04:53 PM

Thanks for the reply :D. It's mobloquer 0.5.1~hardy.

_@_:~$ mobloquer
Segmentation fault

_@_:~$ sudo mobloquer
[sudo] password for _:
Segmentation fault

suprfish

August 14th, 2008, 09:33 PM

I notice that in the mobloquer readme it says it is dependent on moblock-nfq; from apt-get it says it is dependent on moblock. Could this be causing the problem?

jre

August 16th, 2008, 04:43 AM

I notice that in the mobloquer readme it says it is dependent on moblock-nfq; from apt-get it says it is dependent on moblock. Could this be causing the problem?
It' depends on moblock (0.9~rc2). But this is only because there the /etc/default/moblock file is always there.
Further I think moblock related errors would give other output.
Anyway, is moblock running? Try "moblock-control status" and "moblock-control test".

Have you tried a clean reinstall yet?
sudo aptitude purge mobloquer
sudo aptitude install mobloquer
The first command makes sure all config files, such as ~/.config/mobloquer are removed.

Otherwise I'd guess that it is a problem related to other software, e.g. Qt which mobloquer depends on.

winston smith

August 16th, 2008, 05:59 AM

I've been trying to uninstall moblock and get the following errors.
The following packages will be REMOVED:
moblock
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 360kB disk space will be freed.
Do you want to continue [Y/n]? Y
(Reading database ... 96178 files and directories currently installed.)
Removing moblock ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: error processing moblock (--remove):
subprocess pre-removal script returned error exit status 3
Errors were encountered while processing:
moblock
E: Sub-process /usr/bin/dpkg returned an error code (1)

Initial install crapped out on nonexistent blocklists from bluetack, so I replaced them with lists from iblocklist that appeared to allow installation to complete. But after playing with mobloquer, it appeared that moblock would not stop, start, or anything. Not an iptables conflict that I know of as this is the first time I've ever installed Ubuntu, or any Linux distro, and hadn't set up any rules at all.

Anyway, any assistance is appreciated, please be as explicit as possible because I just finished installing Linux for the first time ever about 2 hours ago. 8)

jre

August 17th, 2008, 04:31 AM

There seems to be bug in the LSB init functions (lsb-base) in hardy :-/
I'm having a look at it to make special packages for hardy.
Until then please try the following:
Start MoBlock before you uninstall it.
Either try sudo moblock-control start or if this doesn't work try sudo /usr/bin/moblock -p /etc/moblock/guarding.p2p -q 0 -t -r 10 -a 20 /var/log/moblock.log. Note that the latter only starts the daemon but does not insert the iptables rules - this means it should be enough to make apt/aptitude/synaptic happy but it does not give you a functional MoBlock.

jre

suprfish

August 17th, 2008, 12:05 PM

Thanks for the help, jre :). Fortunately, moblock works fine (it's just mobloquer that is bugged).

bigtel

August 18th, 2008, 03:24 PM

I have a current problem with Moblock which I need some advice on please - I have been trying to update (as my updater says there is one update available) but when I try I keep getting an error message. I tried to remove Moblock and then reistall it and now I keep getting the message below

-----

terry@terry-laptop:~$ sudo aptitude install moblock
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initialising package states... Done
Building tag database... Done
The following packages have been automatically kept back:
acroread-escript
The following NEW packages will be automatically installed:
libnetfilter-queue1 libnfnetlink0
The following packages have been kept back:
acroread acroread-plugins mozilla-acroread
The following NEW packages will be installed:
libnetfilter-queue1 libnfnetlink0
The following packages will be upgraded:
moblock
1 packages upgraded, 2 newly installed, 0 to remove and 4 not upgraded.
Need to get 19.3kB/100kB of archives. After unpacking 139kB will be used.
Do you want to continue? [Y/n/?] y
Writing extended state information... Done
Get:1 http://archive.ubuntu.com hardy/universe libnfnetlink0 0.0.30-2 [12.2kB]
Get:2 http://archive.ubuntu.com hardy/universe libnetfilter-queue1 0.0.13-1 [7042B]
Fetched 19.3kB in 0s (59.5kB/s)
Preconfiguring packages ...
Selecting previously deselected package libnfnetlink0.
(Reading database ... 240183 files and directories currently installed.)
Unpacking libnfnetlink0 (from .../libnfnetlink0_0.0.30-2_i386.deb) ...
Selecting previously deselected package libnetfilter-queue1.
Unpacking libnetfilter-queue1 (from .../libnetfilter-queue1_0.0.13-1_i386.deb) ...
Selecting previously deselected package moblock.
Preparing to replace moblock 0.9~rc2-13~hardy (using .../moblock_0.9~rc2-16~hardy_i386.deb) ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: warning - old pre-removal script returned error exit status 3
dpkg - trying script from the new package instead ...
* Stopping MoBlock moblock [fail]
invoke-rc.d: initscript moblock, action "stop" failed.
dpkg: error processing /var/cache/apt/archives/moblock_0.9~rc2-16~hardy_i386.deb (--unpack):
subprocess new pre-removal script returned error exit status 3
Errors were encountered while processing:
/var/cache/apt/archives/moblock_0.9~rc2-16~hardy_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install. Trying to recover:
Setting up libnfnetlink0 (0.0.30-2) ...

Setting up libnetfilter-queue1 (0.0.13-1) ...

Processing triggers for libc6 ...
ldconfig deferred processing now taking place
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initialising package states... Done
Writing extended state information... Done
Building tag database... Done
terry@terry-laptop:~$

---

Any help and advice to just get Moblock up and running again would be appreciated.

Thanks.

bigtel

August 18th, 2008, 04:30 PM

This is the error message I get through synaptic installer -

--
E: /var/cache/apt/archives/moblock_0.9~rc2-16~hardy_i386.deb: subprocess new pre-removal script returned error exit status 3
--

jre

August 19th, 2008, 11:55 AM

This is the error message I get through synaptic installer -

--
E: /var/cache/apt/archives/moblock_0.9~rc2-16~hardy_i386.deb: subprocess new pre-removal script returned error exit status 3
--
Please have a look at this post:
http://ubuntuforums.org/showpost.php?p=5605844&postcount=67

EDIT: The hardy only bug is fixed in 0.9~rc2-17~hardy

the_unexpected

August 24th, 2008, 10:59 PM

I'm trying to install moblock on a fresh Hardy install, when I try to run the install from terminal using apt-get, the terminal brings up the window shown here (http://img.photobucket.com/albums/v230/mxl2003/moblock_install.png). However, nothing at all happens when I click OK, or any other key on the keyboard that I've discovered. If I press ESC, it returns to the terminal, giving the following error:

dpkg: error processing moblock (--configure):
subprocess post-installation script returned error exit status 10
Errors were encountered while processing:
moblock
E: Sub-process /usr/bin/dpkg returned an error code (1)

I tried to install it via Synaptic, and got farther, even was able to enter ports to whitelist. But when I tried to click Next after whitelisting local LAN, it hung, and then Synaptic returned the following error:

E: moblock: subprocess post-installation script returned error exit status 8

jre

August 25th, 2008, 11:55 AM

I'm trying to install moblock on a fresh Hardy install, when I try to run the install from terminal using apt-get, the terminal brings up the window shown here (http://img.photobucket.com/albums/v230/mxl2003/moblock_install.png). However, nothing at all happens when I click OK, or any other key on the keyboard that I've discovered.
Have you tried pressing TAB until OK is selected and then RETURN? I'm not sure if clicking with the mouse does work.

Anyway, the error you got the second time sounds strange. Please try to reinstall MoBlock:
sudo aptitude purge moblock
sudo aptitude install moblock
Note that during installation you will have to wait some time until the blocklists are downloaded. But there will be a message on the screen notifying you of this.
If installation fails again, then please post the output of "sudo moblock-control status" and your /var/log/moblock-control.log

the_unexpected

August 25th, 2008, 06:29 PM

Have you tried pressing TAB until OK is selected and then RETURN? I'm not sure if clicking with the mouse does work.

Anyway, the error you got the second time sounds strange. Please try to reinstall MoBlock:
sudo aptitude purge moblock
sudo aptitude install moblock
Note that during installation you will have to wait some time until the blocklists are downloaded. But there will be a message on the screen notifying you of this.
If installation fails again, then please post the output of "sudo moblock-control status" and your /var/log/moblock-control.log
Thanks! Tab+Return did get me through what needed to do, however, after downloading the blocklists, it returned the error below. I did, however, check the moblock control log, and found that I'd incorrectly entered config syntax for port ranges (separated by hyphen instead of colon). I corrected this and everything is now running fine...figured I'd post this in case anyone else runs into the same problem. Thanks! :D (the log is attached as a .txt file).
* Starting MoBlock moblock invoke-rc.d: initscript moblock, action "start" failed.
dpkg: error processing moblock (--configure):
subprocess post-installation script returned error exit status 8
Setting up p7zip (4.57~dfsg.1-1) ...
Processing triggers for libc6 ...
ldconfig deferred processing now taking place
Errors were encountered while processing:
moblock
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install. Trying to recover:
Setting up moblock (0.9~rc2-17~hardy) ...
* Reloading MoBlock moblock [ OK ]
* Starting MoBlock moblock invoke-rc.d: initscript moblock, action "start" failed.
dpkg: error processing moblock (--configure):
subprocess post-installation script returned error exit status 8
Errors were encountered while processing:
moblock
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done
Building tag database... Done

Sudo moblock-control status brought up the following:

sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 95261 packets, 89M bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 77605 packets, 11M bytes)
pkts bytes target prot opt in out source destination

Chain moblock_fw (0 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_in (0 references)
pkts bytes target prot opt in out source destination
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Chain moblock_out (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 0

Please check if the above printed iptables rules are correct!

* moblock is not running.

jre

August 26th, 2008, 02:03 PM

Ah, glad you figured it out on your own. And thanks for posting this, it's good to know that a problem is solved.

lovinglinux

September 2nd, 2008, 12:06 AM

@jre,

I wrote on another thread that you replied (about torrent clients) that I was using IPlist instead of Moblock. Now I'm switching to Moblock and would to explain why I was experiencing difficulties with it.

I was a Windows/PeerGuardian user until a couple of weeks ago. First thing I did after switching to Linux was installing Moblock and Firestarter. Unfortunately, the transition itself is not easy, so I tried to understand the whole iptables thing, to make sure I was secure with these applications. I did a couple of tests with Moblock and Firestarter, browsing web sites that I knew that were included in the blocklist. But no matter what I did, those web sites weren't blocked at all. So, I uninstalled it and installed iplist.

Today I discovered why those web sites weren't blocked, even when I didn't allowed HTTP in the Mobloquer GUI. Apparently, if I include ports 80 and 443 during moblock installation, the entry on /etc/default/moblock override Moblocker settings. I'm not an expert, but I guess is because the setup uses port numbers and Mobloquer uses the new "http https..." format. So I deleted the first line of /etc/default/moblock and now I can control which ports I will allow connections within the Mobloquer interface.

Everything is working properly, as far as I know.

So I will stick with Moblock/Moblocker, because it has some nice features that iplist doesn't have. Thanks for your support and effort on building this great tool for Linux users.

jre

September 2nd, 2008, 01:21 PM

Thanks for your feedback! What particularly are the features that IPList doesn't have?

Indeed you are right about that mobloquer bug. I once heard of that but forgot to note it.
Just for the records: mobloquer also saves its settings in /etc/default/moblock (since it's just a frontend for MoBlock/moblock-control). mobloquer correctly reads "80 443" and interprets them as "http https". The bug is that unchecking http or https in mobloquer doesn't remove the 80 or 443. Bug fixes welcome!

Greetings
jre

lovinglinux

September 2nd, 2008, 08:42 PM

Thanks for your feedback! What particularly are the features that IPList doesn't have?

For instance, the ability to allow single IP's "on the fly". I know that this feature to work Moblock should be restarted, but as far as I understand iplist only have the allow.p2p file.

As far as I remember, iplist has the option to allow protocols both ways, while in Mobloquer you can allow incoming, outgoing or both. That is really useful.

Moblocker also stays on the tray when closed, together with Firestarter. It's not a necessary feature, but it i like it.

graysky

September 20th, 2008, 05:09 PM

sudo aptitude purge moblock
sudo aptitude install moblock
Note that during installation you will have to wait some time until the blocklists are downloaded. But there will be a message on the screen notifying you of this.
If installation fails again, then please post the output of "sudo moblock-control status" and your /var/log/moblock-control.log

I too am getting this error (used the debian etch repos hough).

I did the purge, install as you suggested but got errors:

Here are the output you requested:

# moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 18385 packets, 19M bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 17971 packets, 1660K bytes)
pkts bytes target prot opt in out source destination

Please check if the above printed iptables rules are correct!

moblock is not running.

# cat /var/log/moblock-control.log
2008-09-20 17:05:52 EDT Begin: moblock-control reload
Building blocklist^[[31m*^[[39;49m Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Check the /etc/moblock/blocklists.list and$
2008-09-20 17:05:52 EDT Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gz.
Updating bogon.gz.
Updating dshield.gz.
Updating fornonlancomputers.gz.
Updating hijacked.gz.
Updating iana-multicast.gz.
Updating iana-private.gz.
Updating iana-reserved.gz.
Updating level1.gz.
Updating level2.gz.
Updating Microsoft.gz.
Updating proxy.gz.
Updating templist.gz.
Blocklists updated.
Building blocklist.
Installing blocklist to /etc/moblock/guarding.p2p.
MoBlock is not running, doing nothing.
2008-09-20 17:07:52 EDT End: moblock-control update
2008-09-20 17:07:53 EDT Begin: moblock-control start
^[[31m*^[[39;49m Error 170: Could not load kernel module xt_state, not starting MoBlock!
2008-09-20 17:07:54 EDT Begin: moblock-control reload
Building blocklist.
Installing blocklist to /etc/moblock/guarding.p2p.
MoBlock is not running, doing nothing.
2008-09-20 17:07:55 EDT End: moblock-control reload
2008-09-20 17:07:55 EDT Begin: moblock-control start
^[[31m*^[[39;49m Error 170: Could not load kernel module xt_state, not starting MoBlock!

Seems to want the kernel module xt_state which I don't seem to have...

jre

September 22nd, 2008, 05:49 AM

Seems to want the kernel module xt_state which I don't seem to have...
Just for the records, see our discussion at
http://forums.phoenixlabs.org/showthread.php?t=17430

The kernel in question (2.6.23-chw-4 used in the distribution Knoppmyth) does not have the kernel module xt_state at all. (Although the Debian kernels 2.6.22, 2.6.24, 2.6.26 and 2.6.27 do have it).

Therefore my advice (which might break other parts of the system) is to add the Debian repository to /etc/apt/sources.list (use lenny = testing or sid =unstable):
deb http://ftp.debian.org/debian lenny main
and install the current kernel:
sudo aptitude update
sudo aptitude install linux-image-2.6
and then reboot and choose the new kernel in grub. If anything goes wrong just reboot again and use the old kernel.

lovinglinux

September 22nd, 2008, 07:43 PM

@jre

Are you going to remove the "Whitelist IPs" feature on future versions of Mobloquer? I really like this feature and will miss it :(

If yes, would be possible to add a feature to allow editing "allow.p2p" file from the Mobloquer gui?

jre

September 23rd, 2008, 05:33 AM

Are you going to remove the "Whitelist IPs" feature on future versions of Mobloquer? I really like this feature and will miss it :(

If yes, would be possible to add a feature to allow editing "allow.p2p" file from the Mobloquer gui?
Don't worry. My plan was to wait for the implementation of allow.p2p in mobloquer and then (and only then) remove it from moblock-control. So I wanted to completely replace the first by the latter and keep the code base small.

Unfortunately the upstream development of mobloquer is stalled currently :-/ More on that another time. Note that I can't do the C++ necessary for mobloquer.

Therefore, and to keep my TODO small, I decided to keep everything as it is. In the next release the "deprecated" warning is removed.

lovinglinux

September 23rd, 2008, 09:20 AM

Don't worry. My plan was to wait for the implementation of allow.p2p in mobloquer and then (and only then) remove it from moblock-control. So I wanted to completely replace the first by the latter and keep the code base small.

Unfortunately the upstream development of mobloquer is stalled currently :-/ More on that another time. Note that I can't do the C++ necessary for mobloquer.

Therefore, and to keep my TODO small, I decided to keep everything as it is. In the next release the "deprecated" warning is removed.

Thank you. Great news.

chronniff

September 26th, 2008, 11:21 PM

This is what I get in my moblock-control.log every time I try to update to whatever update came through the repos today:

2008-09-26 11:04:24 PM EDT Begin: moblock-control reload
Building blocklist * Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available.
* Check the /etc/moblock/blocklists.list and try a
* "moblock-control update" first. Aborting!
2008-09-26 11:04:24 PM EDT Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gz failed!
rm: cannot remove `ads-trackers-and-bad-pr0n.gz': No such file or directory
Trying without timestamping * Error 9: www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz not available. Aborting!
* To fix this manually download www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz and copy it to /var/spool/moblock/used
2008-09-26 11:04:37 PM EDT Begin: moblock-control reload

And this is what I get in the terminal:

dave@dave-laptop:~$ sudo apt-get install moblock moblock-control
[sudo] password for dave:
Reading package lists... Done
Building dependency tree
Reading state information... Done
moblock is already the newest version.
moblock-control is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
2 not fully installed or removed.
After this operation, 0B of additional disk space will be used.
Setting up moblock-control (1.0-1+hardy) ...
* Reloading MoBlock moblock ... failed.
Trying an update instead to get missing blocklists, this may take several
minutes. You may do in another terminal a
"tail -f /var/log/moblock-control.log"
to follow the update process. Pressing "control" + "c" stops this.
The lists are saved to /var/spool/moblock/.
* Updating blocklists and reloading MoBlock moblock ... failed.
dpkg: error processing moblock-control (--configure):
subprocess post-installation script returned error exit status 9
dpkg: dependency problems prevent configuration of mobloquer:
mobloquer depends on moblock-control; however:
Package moblock-control is not configured yet.
dpkg: error processing mobloquer (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
moblock-control
mobloquer
E: Sub-process /usr/bin/dpkg returned an error code (1)

Any ideas what's going on? seems as though the blocklists can't reached, am I alone in this problem or is the site that hosts the lists just not online...although I doubt that's the problem since this happened right after I updated the package....I had moblock and mobloquer installed, and I saw that moblock-control was its own seperate package, so I guess when I updated it downloaded it....at this point I have purged and reinstalled all three of those packages more than once.....any input would be great,even if it is just to commiserate

trpnblies7

September 27th, 2008, 12:51 AM

I've been getting the same error as chronniff all day long. It seems as though the blocklist site is down. It's making updating anything else really annoying, as the processes stall because moblock keeps trying to update and I have to manually cancel it.

chronniff

September 27th, 2008, 01:22 AM

yeah, the funny thing is that when I go to the site is up and running fine...though I haven't tried to download a list directly from the site

lovinglinux

September 27th, 2008, 02:31 AM

I don't know if this is the problem you are experiencing, but I also had a few issues the last couple of days updating the lists from Bluetack, even when using another software to download them. I build my own lists, merging a few sources with TinyBLM (http://www.bluetack.co.uk/forums/index.php?showtopic=11022&hl=TinyBLM), so I don't receive any errors on moblock, since it retrieves only local files.

Bluetack's lists are not being updated as they were before. A few list maintainers have quit Bluetack's team and created a new list distribution site (http://blocklist1.snowmanuk.net/). You can read about this here (http://forums.phoenixlabs.org/showthread.php?t=17291) and as you can see here (http://www.bluetack.co.uk/forums/index.php?showtopic=19067), Bluetack is searching for new IP hunters and verifiers. So it might be a good idea to add the TBG lists to moblock and temporarily disabling Bluetack's list until the problem is completely solved.

Another source that might interest you is i-Blocklist (http://iblocklist.com/lists.php), but this one do not integrates with moblock yet, so you have to download them manually and add the local files paths to moblock.

chronniff

September 27th, 2008, 03:44 AM

Thanks a lot man....I remember about a year ago they came very close to shutting down their servers due to lack of funds....I guess the group was just falling apart, its a shame considering most of the p2p community has been depended on the site for their security for years now...not that most of the users even pay attention as to where these magic lists of IPs come from.....I appreciate the heads up though...thanks again

lovinglinux

September 27th, 2008, 05:43 AM

jre

September 27th, 2008, 09:26 AM

Thanks, lovinglinux, for this information - I totally missed that. Although the level1 is not empty here.

For people not having problems: Do nothing, be happy, don't make unnecessary blocklist downloads.

So for all people having update problems: The old default blocklists by bluetack currently often fail to download. MoBlock will refuse to start if not all configured blocklists are available. So your problem is the download of the blocklists, but not a problem of your installation. So do NOT purge moblock-control - this will remove all downloaded blocklists, even those that were already downloaded successfully - so purging will make your problems bigger.

What you can do now:
Check what blocklists fail to download in /var/log/moblock-control.

If you want to use that blocklists try a "moblock-control update" or download it manually. Then place the blocklist in /var/spool/moblock/used. (e.g. "sudo cp level1.gz /var/spool/moblock/used")

If you don't want to use that blocklist just run "sudo dpkg-reconfigure moblock-control" and deselect the blocklist in question. For the other questions that you will be asked - just keep everything as it is. Then do a "moblock-control update".

If you want to use blocklists by TBG just add them to /etc/moblock/blocklists.list and do a "moblock-control update".

What I will do: I'll prepare a update which uses the new lists by TBG per default (this will only work on new installs). On updates from the current installations I'll notice the user of the current situation.

lovinglinux

September 27th, 2008, 03:03 PM

Thanks, lovinglinux, for this information - I totally missed that. Although the level1 is not empty here.

You are welcome. Level 1 is ok now, but it was empty when I wrote the previous post :-)

If you want to use that blocklists try a "moblock-control update" or download it manually. Then place the blocklist in /var/spool/moblock-control/used. (e.g. "sudo cp level1.gz /var/spool/moblock-control/used")

I couldn't find /var/spool/moblock-control/used but I have found /var/spool/moblock/used and mobloquer is updating to this directory. Does this means that the new moblock-control package wasn't properly installed or is just the path configured in mobloquer settings?

Anyway, I have created a script to download Bluetack's lists from an alternative source and move them to /var/spool/moblock/used directory, so moblock can be loaded properly. This do not require any changes in moblock lists.

#!/bin/bash

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/ads-trackers-and-bad-pr0n.gz http://list.iblocklist.com/?list=bt_ads
sudo mv ~/Desktop/ads-trackers-and-bad-pr0n.gz /var/spool/moblock/used/ads-trackers-and-bad-pr0n.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/Microsoft.gz http://list.iblocklist.com/?list=bt_microsoft
sudo mv ~/Desktop/Microsoft.gz /var/spool/moblock/used/Microsoft.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/bogon.gz http://list.iblocklist.com/?list=bt_bogon
sudo mv ~/Desktop/bogon.gz /var/spool/moblock/used/bogon.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/dshield.gz http://list.iblocklist.com/?list=bt_dshield
sudo mv ~/Desktop/dshield.gz /var/spool/moblock/used/dshield.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/edu.gz http://list.iblocklist.com/?list=bt_edu
sudo mv ~/Desktop/edu.gz /var/spool/moblock/used/edu.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/hijacked.gz http://list.iblocklist.com/?list=bt_hijacked
sudo mv ~/Desktop/hijacked.gz /var/spool/moblock/used/hijacked.gz

#wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/iana-multicast.gz http://www.bluetack.co.uk/config/iana-multicast.gz
#sudo mv ~/Desktop/iana-multicast.gz /var/spool/moblock/used/iana-multicast.gz

#wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/iana-private.gz http://www.bluetack.co.uk/config/iana-private.gz
#sudo mv ~/Desktop/iana-private.gz /var/spool/moblock/used/iana-private.gz

#wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/iana-reserved.gz http://www.bluetack.co.uk/config/iana-reserved.gz
#sudo mv ~/Desktop/iana-reserved.gz /var/spool/moblock/used/iana-reserved.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/level1.gz http://list.iblocklist.com/?list=bt_level1
sudo mv ~/Desktop/level1.gz /var/spool/moblock/used/level1.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/level2.gz http://list.iblocklist.com/?list=bt_level2
sudo mv ~/Desktop/level2.gz /var/spool/moblock/used/level2.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/level3.gz http://list.iblocklist.com/?list=bt_level3
sudo mv ~/Desktop/level3.gz /var/spool/moblock/used/level3.gz

#wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/fornonlancomputers.gz http://www.bluetack.co.uk/config/fornonlancomputers.gz
#sudo mv ~/Desktop/fornonlancomputers.gz /var/spool/moblock/used/fornonlancomputers.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/proxy.gz http://list.iblocklist.com/?list=bt_proxy
sudo mv ~/Desktop/proxy.gz /var/spool/moblock/used/proxy.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/rangetest.gz http://list.iblocklist.com/?list=bt_rangetest
sudo mv ~/Desktop/rangetest.gz /var/spool/moblock/used/rangetest.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/spyware.gz http://list.iblocklist.com/?list=bt_spyware
sudo mv ~/Desktop/spyware.gz /var/spool/moblock/used/spyware.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/spider.gz http://list.iblocklist.com/?list=bt_spider
sudo mv ~/Desktop/spider.gz /var/spool/moblock/used/spider.gz

wget --timeout=30 --tries=3 --timestamping --no-directories -O ~/Desktop/templist.gz http://list.iblocklist.com/?list=bt_templist
sudo mv ~/Desktop/templist.gz /var/spool/moblock/used/templist.gz

Don't forget to remove or comment the lines of lists that you don't use.

This must be run through Terminal, because it will prompt for sudo password.

There is probably a more elegant way of doing this, but I'm still a Linux newbie :-). I hope this will help people experiencing issues updating bluetack's lists.

jre

September 28th, 2008, 08:24 AM

I couldn't find /var/spool/moblock-control/used but I have found /var/spool/moblock/used and mobloquer is updating to this directory. Does this means that the new moblock-control package wasn't properly installed or is just the path configured in mobloquer settings?

No, this simply means that I should think while typing. The path is, and has been, /var/spool/moblock/used
Sorry, for the confusion, I'll correct that in my post.

The script that you have should work, but that is nearly the same as what happens on "moblock-control update". IMHO the problem is on bluetack's side, all that we can do is try several times (either with your script or with "moblock-control update") or wait - or change the lists that we use.

Hehe, I started moblock-control with writing similar things as you are doing now ;-) Happy coding!

lovinglinux

September 28th, 2008, 09:16 AM

No, this simply means that I should think while typing. The path is, and has been, /var/spool/moblock/used
Sorry, for the confusion, I'll correct that in my post.

No problem.

The script that you have should work, but that is nearly the same as what happens on "moblock-control update". IMHO the problem is on bluetack's side, all that we can do is try several times (either with your script or with "moblock-control update") or wait - or change the lists that we use.

Not really. While I imagine the process should be similar, the script I wrote uses a mirror, so this could solve the problem temporarily without the need for changing lists sources. So, it's a single-click fast solution. I'm not really sure when or how they sync the lists with bluetack site, but I'm pretty sure the files are hosted on another domain. I even had to rename the files with the script, because they put a "bt_" prefix in front of most of the gz files.

IMHO the problem is on bluetack's side...

I agree. If I didn't use a different source, the script wouldn't help much.

Hehe, I started moblock-control with writing similar things as you are doing now ;-) Happy coding!

Hehe, this thing is addictive. Before moving to Linux I had something against the command line approach, but now I can see how good it is. The problem is that I'm starting to spend more time imagining how I could the make the computer do things I want and the way I want than actually using it :-)

jre

September 29th, 2008, 04:10 PM

Not really. While I imagine the process should be similar, the script I wrote uses a mirror, so this could solve the problem temporarily without the need for changing lists sources. So, it's a single-click fast solution. I'm not really sure when or how they sync the lists with bluetack site, but I'm pretty sure the files are hosted on another domain. I even had to rename the files with the script, because they put a "bt_" prefix in front of most of the gz files.

Oh! Yes, now I see you're using iblocklist. I just scanned the source but didn't really look at the URLs ;-)

This is one of the biggest TODOs left: supporting php redirects so that iblocklist can be used with moblock-control.

lovinglinux

September 29th, 2008, 09:45 PM

This is one of the biggest TODOs left: supporting php redirects so that iblocklist can be used with moblock-control.

That would be great.

I have a new question.

I'm only using local lists. I download several lists using the script and merge them using TinyBLM. Nevertheless, do I need to run the update in mobloquer whenever I change my local lists or hitting "Reload' will be enough to get the latest local lists? I'm asking this because I was updating until today, when I got the same issue posted by chronniff. The weird thing is that I'm not using any bluetacks's lists but moblock keeps trying to connect to the site and get stuck in the middle of the process.

jre

September 30th, 2008, 11:49 AM

That would be great.

I have a new question.

I'm only using local lists. I download several lists using the script and merge them using TinyBLM. Nevertheless, do I need to run the update in mobloquer whenever I change my local lists or hitting "Reload' will be enough to get the latest local lists? I'm asking this because I was updating until today, when I got the same issue posted by chronniff. The weird thing is that I'm not using any bluetacks's lists but moblock keeps trying to connect to the site and get stuck in the middle of the process.

"reload" is good for you. Then all lists configured in blocklists.list will be unpacked and cat'ted together to the master blocklist /etc/moblock/guarding.p2p. Since you are only using local lsits there's no need to do a "update".
When you do an "update", moblock-control tries to connect to bluetack first to test if network access is available. I might use another TESTHOST than bluetack.co.uk, or perhaps check this with a more sophisticated way. Currently it's simply downloading bluetack's index.html ...
So I guess you got an "Error 171: No connection to www.bluetack.co.uk. Aborting!", right?

Crafty Kisses

September 30th, 2008, 01:50 PM

Thanks for the tutorial, really nice.

lovinglinux

September 30th, 2008, 02:16 PM

"reload" is good for you. Then all lists configured in blocklists.list will be unpacked and cat'ted together to the master blocklist /etc/moblock/guarding.p2p. Since you are only using local lsits there's no need to do a "update".

Thanks. Moblock doesn't merge ranges when creating /etc/moblock/guarding.p2p right?

When you do an "update", moblock-control tries to connect to bluetack first to test if network access is available. I might use another TESTHOST than bluetack.co.uk, or perhaps check this with a more sophisticated way. Currently it's simply downloading bluetack's index.html ...
So I guess you got an "Error 171: No connection to www.bluetack.co.uk. Aborting!", right?

Yep, something like that. I don't know the implications of using another TESTHOST, but it might be a good idea, due to recent bluetack's failures.

jre

October 1st, 2008, 04:38 PM

Thanks. Moblock doesn't merge ranges when creating /etc/moblock/guarding.p2p right?
No, the resulting list is only cat'ted togerther. This is done by moblock-control. The MoBlock daemon does the merging when it starts and loads the list.

Thanks Codename!

lovinglinux

October 5th, 2008, 10:01 AM

No, the resulting list is only cat'ted togerther. This is done by moblock-control. The MoBlock daemon does the merging when it starts and loads the list.

This is something I would like to better understand.

I have already noticed that when you reload moblock it re-creates the guarding.p2p file using the current selected lists sources, simply appending all lists ranges to the file, so there is no merging at this point. Then when I start moblock, there is a CPU spike for a while, which I believe is due to MoBlock daemon writing the iptables. After a while, the CPU load goes back to normal and the "Currently blocking xxxx IP ranges" message is updated to reflect the updated number of ranges used. But this number does not correspond to a merged list. For example, when I merge the same lists used on moblock with TinyBLM, there is a significant reduction in the number of ranges, due to range "duplicates" being merged. The log file of TinyBLM provides the total number of ranges before and after merging. When compared to the "Currently blocking xxxx IP ranges" on moblock I get the same number of ranges before merging in the TinyBLM log.

Additionally, the CPU spike time before updating the number of blocking ranges on mobloquer is much shorter than the one of TinyBLM. When merging lists with TinyBLM sometimes it takes like 20 minutes to complete the merging, while moblock update the iptables pretty fast. Why? Does moblock simply copy the ranges from guarding.p2p and write them to the iptables regardless if they are duplicates or not?

What happens if the guarding.p2p files has some commented lines? Does moblock ignores these lines or could they screw up my iptable rules? I'm asking this because I use some sources with two commented lines in the beginning of each list and it's kind of annoying to remove them manually.

semteXKG

October 6th, 2008, 07:15 AM

Hey!

I've a problem with moblock: it worked quiet good for a while till i installed it inside a vm. the vm is connected to the network over NAT.

The Problem now is: DNS Resolution is broken, when i activate moblock it stops working, when i stop it it works again...

i tried to reconfigure it with dpkg-reconfigure moblock, but nothing happens?

The moblock-config status:

alm@defiant:~$ sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 551K packets, 179M bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain OUTPUT (policy ACCEPT 909K packets, 1154M bytes)
pkts bytes target prot opt in out source destination
3 180 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
3 180 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

i did not whitelist lan traffic, but this wasn't a problem in the previous installation...

I'd really appreciate the help,
semteX

jre

October 6th, 2008, 01:43 PM

Do a "tail -f /var/log/moblock.log" to follow live the logfile. Then you see which IPs get blocked and therefore cause your problems. whitelist them or add them to your allow.p2p.

I'm quite sure that this is a problem with a blocked LAN.

semteXKG

October 6th, 2008, 02:42 PM

thanks, will try this in a sec...

what's the command to rerun the moblock config menu? i thought it was dpkg-reconfigure but I was quiet wrong with that guess...

add: whitelisted the whole LAN, works like a charm, thanks!

jre

October 8th, 2008, 01:42 PM

what's the command to rerun the moblock config menu? i thought it was dpkg-reconfigure but I was quiet wrong with that guess...
I've split the packages: moblock (the daemon from moblock.berlios.de) and moblock-control (everything else), so it is:
dpkg-reconfigure moblock-control

Glad to hear it's working now!

GPizza

October 11th, 2008, 07:30 AM

Hi,
I couldn't find any post for the problem I am facing.
Everytime I run the update manager it downloads few moblock files but update does happen. I am getting the following error message: "Could not dowload all repository indexes" and the following description of the problem:
"GPG error: http://moblock-deb.sourceforge.net hardy Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CB53C4079072870BFailed to fetch http://blognux.free.fr/debian/dists/unstable/main/binary-i386/Packages.gz 404 Not Found
Some index files failed to download, they have been ignored, or old ones used instead."
As I am not a Lnux would anyone knows hot to get it fixed? I would really appreciate if the explanation is in a "for Dummies" way. :-)

Thanks a lot!

lovinglinux

October 13th, 2008, 04:50 AM

@jre

Do you know any script to merge IP ranges?

I already have a nice script that download lists from several sources, extract compressed files and cat them into a few different lists, but there is one list that I need to merge, because it's not working on Deluge's blocklist plugin with just appended ranges.

I know moblock can download, extract and "cat" the ranges, but I'm using a different approach with it. I've created different compilation lists that I use depending on what I'm doing and if there are ports open or not. For example, if I'm just browsing the web I use my custom "web browsing" list which is more forgiven. If I'm using p2p and thus have a port open I use a more restrictive list, the same goes for games and other stuff. This way, is very easy to enable/disable a single list on mobloquer instead of several lists each time my activity requires a different level of protection. So I have like 4 lists with different levels of protection in mobloquer's blocklist sources.

The way I'm doing I can update all lists, including those not supported by moblock, and "cat" them with a single command. Would be nice if I could merge them, so I don't have to open TinyBLM on Wine to do this (this command-line thing is making me a little bit lazy these days :-))

jre

October 13th, 2008, 01:58 PM

"GPG error: http://moblock-deb.sourceforge.net hardy
Release: The following signatures couldn't be verified because the public key is not available:
NO_PUBKEY CB53C4079072870B

This is just a warning, but not an error. You get all needed files of moblock-deb.sourceforge.net - but you can't verify them (so you can't be sure if you really get my packages or if someone bad is faking them). The installation of MoBlock will work anyway.
To verify you have to add my GPG key. Do the following in the terminal:
gpg --keyserver wwwkeys.eu.pgp.net --recv 9072870B
gpg --export --armor 9072870B | sudo apt-key add -

Failed to fetch http://blognux.free.fr/debian/dists/unstable/main/binary-i386/Packages.gz 404 Not Found
This is an entry not related to MoBlock. Either you messed it up when you added this entry to your /etc/apt/sources.list or the remote site changed. So you have to check this.

jre

October 13th, 2008, 02:27 PM

Do you know any script to merge IP ranges?

I already have a nice script that download lists from several sources, extract compressed files and cat them into a few different lists, but there is one list that I need to merge, because it's not working on Deluge's blocklist plugin with just appended ranges.

General: I think merging is too much for doing it with an script, but calling some application from within a script should be good, too:
Obviously you already know BLM (BTW, where do you get it, I haven't found it on bluetack). Can't you use it from the command line?
I know of a guy who is working on a command line merging tool, but there's nothing available, yet.
You can try the old peerguardnf (old PG Linux, development is discontinued), which has a list merging feature. You can download it from https://sourceforge.net/projects/peerguardian.
Use it with:
cat LIST1 LIST2 ... | peerguardnf -f merged.p2p

Perhaps you can also use the merge feature from iblocklist.com (for VIP members only). But I don't know if this works for you.

uljanow

October 13th, 2008, 05:12 PM

You can also use iplist to merge/convert lists by invoking it like
iplist --output=merged.p2p.gz --output-fmt=p2p list1.p2p list2.dat list2.p2p.gz ...

lovinglinux

October 13th, 2008, 11:29 PM

General: I think merging is too much for doing it with an script, but calling some application from within a script should be good, too:

Yep, this is what I want.

Obviously you already know BLM (BTW, where do you get it, I haven't found it on bluetack).

BLM does not play well with Wine. I get TinyBLM form here (http://www.bluetack.co.uk/forums/index.php?showtopic=11022&hl=TinyBLM) and BLM form here (http://www.bluetack.co.uk/forums/index.php?autocom=faq&CODE=02&qid=30).

Can't you use it from the command line?

I don't know. Is it possible to use command line to invoke an application with Wine?

I know of a guy who is working on a command line merging tool, but there's nothing available, yet.

Please let me know when available. I would like to test it.

You can try the old peerguardnf (old PG Linux, development is discontinued), which has a list merging feature. You can download it from https://sourceforge.net/projects/peerguardian.
Use it with:
cat LIST1 LIST2 ... | peerguardnf -f merged.p2p

This could be a solution. Is there any incompatibility with moblock?

EDIT: AWESOME. It works like a charm and it is much faster than TinyBLM. It produces more merged lines, since it doesn't merge several consecutive ranges with different descriptions like Tiny BLM, but the speed and the command-line control are much more important. Thank you very much. Just to be sure, if I don't send any other command to peerguardian it won't be loaded and won't mess with my iptables right?

Perhaps you can also use the merge feature from iblocklist.com (for VIP members only). But I don't know if this works for you.

I'm contributing with new ranges, but I still don't have a VIP account. I guess I will get one soon, but I don't think it would be possible to make the process automatic.

Thank you very much for your help.

You can also use iplist to merge/convert lists by invoking it like
iplist --output=merged.p2p.gz --output-fmt=p2p list1.p2p list2.dat list2.p2p.gz ...

Thanks for the tip. Unfortunately, you can't install iplist and moblock at the same time.

jre

October 15th, 2008, 02:13 PM

Thanks for the tip. Unfortunately, you can't install iplist and moblock at the same time.
Yes, thanks!

iplist and moblock conflict because they would mess up the MARKing of the packets when they run at the same time.

Of course just having them installed at the same time would not cause problems, but I want to keep with the "conflicts" to prevent the MARKing problems.

The peerguardnf command that I told you is safe to use.

lovinglinux

October 17th, 2008, 05:48 PM

I'm slowly moving from mobloquer to a command-line/script setup and need some help to check if I'm doing something wrong.

Let me explain first how I'm using moblock.

1 - Instead of using the default lists from bluetack, I have a script that download several lists from different sources, extract the compressed files, clean up comment lines and typos, then append and merge specific lists into different compilation lists, with variable degrees of protection, which I call "profiles".

2 - So I have merged lists for web browsing, gaming, p2p and generic use, that can be easily enabled/disabled in moblock.

3 - I also have different /etc/default/moblock file for each profile, so I can configure them with different permissions or whatever. For example the browsing profile has WHITE_TCP_OUT="http https", while the others do not. Each profile also has the following specific files:

blocklists.list
iptables-custom-insert.sh
iptables-custom-remove.sh

I have a script for each profile, so whenever I launch them, they replace the configuration files in /etc/moblock/ directory with the ones above, so each profile end up with it's own sets of blocklists, configurations and iptable scripts.

Here is an example of a script that launch a single profile. I have included comments in the code.

#!/bin/bash

#kill mobloquer and firestarter just in case

killall mobloquer
sudo killall firestarter

#stop moblock, removing it's ipchains from the iptable

sudo moblock-control stop

#reload firestarter to restore the default iptable configuration

sudo firestarter --stop
sudo firestarter --start

#replace moblock configuration files according to the profile used

sudo cp ~/Databases/Blocklists/Config/moblock-browsing /etc/default/moblock
sudo cp ~/Databases/Blocklists/Config/blocklists-browsing.list /etc/moblock/blocklists.list
sudo cp ~/Databases/Blocklists/Config/iptables-custom-insert-browsing.sh /etc/moblock/iptables-custom-insert.sh
sudo cp ~/Databases/Blocklists/Config/iptables-custom-remove-browsing.sh /etc/moblock/iptables-custom-remove.sh

#update the allow lists from the merged blocklists directory

sudo cp ~/Databases/Blocklists/Merged/allow-out.p2p /etc/moblock/allow-out.p2p
sudo cp ~/Databases/Blocklists/Merged/allow-in.p2p /etc/moblock/allow-in.p2p
sudo cp ~/Databases/Blocklists/Merged/allow-fw.p2p /etc/moblock/allow-fw.p2p

#reload moblock to update the profile blocklists in case they have been updated

sudo moblock-control reload

#start moblock to insert it's chains and custom iptable rules

sudo moblock-control start

sleep 10 && sudo moblock-control test

#load moblock log

tail -f /var/log/moblock.log &

#launch a panel alert to notify the process is finished

zenity --text "Moblock Browsing Profile Running" --notification

#replace the desktop background with profile specific wallpaper to show which profile is running

gconftool -t string -s /desktop/gnome/background/picture_filename ~/Pictures/Wallpaper/moblock/browsing.png

Since iptables are a little bit overwhelming to me, I'm still using Firestarter to generate basic firewall rules, in which no ports are open and outgoing policy is restrictive (whitelist traffic). That's why the profile script stop and start Firestarter just after stopping moblock, so It can restore my default firewall rules.

Here are my default iptable rules, without moblock chains:

EDIT: removed iptables rules

This profile, which uses my Firestarter basic iptable configuration, allows outbound connections on ports 80, 443, 993 and 6667 only, plus local network related IP's and services. It does not allow incoming connections (except from the router IP).

When I start a profile like the one for p2p activity, it opens the necessary port in the iptables using the profile iptables-custom-insert.sh

In this case, the iptables-custom-insert.sh clears the INBOUND and OUTBOUND Firestarter chains, recreate the default rules which Firestarter would normally add, without the restrictive rules for outbound connections (change policy to permissive) and add the rules necessary to open the port for incoming connections (INBOUND chain). Here is the script:

iptables -F INBOUND
iptables -A INBOUND -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INBOUND -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INBOUND -s 192.168.x.x -j ACCEPT
iptables -A INBOUND -p tcp -m tcp --dport 49152 -j ACCEPT
iptables -A INBOUND -p udp -m udp --dport 49152 -j ACCEPT
iptables -A INBOUND -j LSI

iptables -F OUTBOUND
iptables -A OUTBOUND -p icmp -j ACCEPT
iptables -A OUTBOUND -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTBOUND -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTBOUND -d 208.107.188.17 -j LSO
iptables -A OUTBOUND -j ACCEPT

And this is the resulting iptable rules (including moblock's chains)

EDIT: removed iptables rules

Whenever I stop moblock manually, the iptables-custom-remove.sh replaces the INBOUND and OUTBOUND Firestarter chains with default values, thus restoring the restrictive outbound policy and closing any open port. If I launch another profile instead, the script will also stop moblock (iptables-custom-remove.sh will run), then stop and start Firestarter just in case something goes wrong with the iptables-custom-remove.sh and only then will copy the new moblock configuration files prior to restarting moblock with the new profile settings. Here is the iptables-custom-remove.sh scrip for the p2p profilet:

iptables -F INBOUND
iptables -A INBOUND -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INBOUND -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INBOUND -s 192.168.x.x -j ACCEPT #router internal IP
iptables -A INBOUND -j LSI

iptables -F OUTBOUND
iptables -A OUTBOUND -p icmp -j ACCEPT
iptables -A OUTBOUND -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTBOUND -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTBOUND -d 192.168.x.x -j ACCEPT #router internal IP
iptables -A OUTBOUND -d 192.168.x.x -j ACCEPT #notebook internal IP
iptables -A OUTBOUND -d xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A OUTBOUND -d xxx.xxx.x.xxx -j ACCEPT #DNS
iptables -A OUTBOUND -d 200.177.254.149 -j ACCEPT
iptables -A OUTBOUND -p tcp -m tcp --dport 80 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p udp -m udp --dport 80 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p tcp -m tcp --dport 443 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p udp -m udp --dport 443 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p tcp -m tcp --dport 993 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p udp -m udp --dport 993 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p tcp -m tcp --dport 6667 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -p udp -m udp --dport 6667 -s 192.168.x.x -j ACCEPT
iptables -A OUTBOUND -j LSO

With this setup I can easily launch a profile script from a panel launcher, thus changing the configuration of Firestarter rules, based on ports I need to open and required outbound policy. At the same time, blocklists lists will be reloaded and moblock will be restarted, inserting rules according to the profile I'm using.

The only problem is that, if I decide to change my Firestarter basic configuration (which is sometimes a temptation) I have to manually update moblock scripts to perform the necessary rules replacements when starting/stopping. Additionally, If I manually enable/disable blocklists using mobloquer GUI, the scripts won't be updated accordingly. So, to be safe I have to avoid changing Firestarter or Moblock configurations using their GUI.

I guess I could uninstall Firestarter and create the entire iptable using moblock's custom scripts right? If possible to use moblock this way, is there any rule necessary to properly handle those packets marked by moblock (not in the blocklist)?

If I decide to replicate Firestarter rules to add them to moblock's custom scripts, do I need to create INBOUND and OUTBOUND chains or INPUT and OUTPUT are enough to do the job?

I don't know much about iptables, but it seems to me that any new allowed/blocked IP or service rule added using Firestarter GUI it's only included in the OUTBOUND and INBOUND chains, so why so many rules in the INPUT and OUTPUT chains? Are all necessary?

The final question: Is it possible to configure Firestarter and then export the rules to a script so I can use it to create moblock's custom scripts?

Sorry if I'm asking things not directly related to moblock, but I guess this is the best thread to post them. If someone could review my rules and procedures to verify if I'm doing something wrong would be much appreciated.

jre

October 26th, 2008, 02:07 PM

AFAIK firestarter is simply a wrapper which inserts iptables rules (and not a permanently running daemon).

But it's definitely coorect that you first stop moblock, then replace its configuration and then start it again.

So perhaps you have some overkill in your first script but it seems correct to me.

General iptables:
Please also refer to post #1 in this thread.

INPUT and OUTPUT are the chains that are always there.

INBOUND and OUTBOUND are those created by firestarter and
moblock_in and moblock_out those by moblock-control.

E.g. incoming traffic starts at the head of INPUT and passes through the rules towards the bottom. Every rule is configured to match certain packets based on their destination/source, port, state, mark, ...

When it hits a REJECT or DROP it will be blocked forever.
When it hits ACCEPT it will be definitely accepted.
When it hits INBOUND or moblock_in it changes to these chains.
There if it hits RETURN it will go back to INPUT.
When it hits NFQUEUE it will be checked by moblock and get a MARK which marks him either to be blocked or not to be blocked. Then it will start at the head of INPUT again, now being MARKed so that its travells will take a new route.
If traffic makes it till the bottom of the line without being blocked its fate will be decided by the chain policy.

So, yes, the rules in INPUT and in INBOUND are necessary.

Please note that I did not have a datailed look of your iptables commands but it sounds good.

To allow usage of mobloquer you may copy the /etc/default/moblock and the other conf files to your profile when you stop the profile.

To avoid the insertion of the firestarter iptables rules (I think you forget those from INPUT here) you might also create firestarter configuration files for every profile and then do

profile 1 start:
firestarter stop
moblock-control stop
copy firestarter.configuration files profile1
copy moblock-control.configuration files profile1
firestarter start
moblock-control reload [no more needed for the next version moblock-control 1.1]
moblock-control start

profile 1 stop:
copy back firestarter.configuration files profile1 to your home
copy back moblock-control.configuration files profile1 to your home

I think this setup allows that you use both GUIs (after firestarter changes you have to restart moblock-control) as long as you do the "stop" to save its changes.

But I'm not common with firestarter and don't know what configuration files to use.

I hope this answers your questions, just write again if you miss something.

jre

lovinglinux

October 26th, 2008, 03:24 PM

jre, thank you very much for this detailed explanation. I have already tried to copy Firestarter configuration. It works for replacing rules, but it doesn't work when you need to change default policy. I don't know why. Anyway, I decided to uninstall Firestarter and make all iptables rules with moblock scripts.

Now, whenever I stop moblock, the "remove" script flushes the iptables, remove additional chains and set the default policy (INPUT, OUTPUT and FORWARD) to DROP, thus working like Firestarter lock feature and preventing network activity while moblock is turned off. The code is below:

iptables -F
iptables -X
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

When I start moblock again, it will insert all rules in the INPUT/OUTPUT chains and create two new chains (INBOUND/OUTBOUND) which I use just for logging and dropping packets not accepted by the default chains. Here is the "insert" script:

iptables -N INBOUND
iptables -N OUTBOUND

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables -A INPUT -i eth0 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -s 192.168.x.x -j ACCEPT #router internal IP
iptables -A INPUT -s xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A INPUT -s xxx.xxx.x.xxx -j ACCEPT #DNS
iptables -A INPUT -i eth0 -d 255.255.255.255 -j DROP
iptables -A INPUT -d 192.168.2.255 -j DROP
iptables -A INPUT -d 224.0.0.0/8 -j DROP
iptables -A INPUT -s 224.0.0.0/8 -j DROP
iptables -A INPUT -s 255.255.255.255 -j DROP
iptables -A INPUT -m state --state INVALID -j DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p icmp -j INBOUND
iptables -A INPUT -j INBOUND
iptables -A INPUT -j DROP

iptables -A FORWARD -j DROP

iptables -A OUTPUT -o eth0 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 53 -s 192.168.x.x -d xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 53 -s 192.168.x.x -d xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 53 -s 192.168.x.x -d xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 53 -s 192.168.x.x -d xxx.xxx.x.xx -j ACCEPT #DNS
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 80 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 80 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 443 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 443 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 993 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 993 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp -m tcp --dport 6667 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -o eth0 -p udp -m udp --dport 6667 -s 192.168.x.x -j ACCEPT
iptables -A OUTPUT -d 224.0.0.0/8 -j DROP
iptables -A OUTPUT -s 224.0.0.0/8 -j DROP
iptables -A OUTPUT -s 255.255.255.255 -j DROP
iptables -A OUTPUT -m state --state INVALID -j DROP
iptables -A OUTPUT -d 192.168.x.x -j ACCEPT #router internal IP
iptables -A OUTPUT -d 192.168.x.x -j ACCEPT #notebook internal IP
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A OUTPUT -p icmp -j ACCEPT
iptables -A OUTPUT -j OUTBOUND
iptables -A OUTPUT -j DROP

iptables -A INBOUND -j LOG --log-prefix '*** INBOUND ***' --log-level 4
iptables -A INBOUND -j DROP

iptables -A OUTBOUND -j LOG --log-prefix '*** OUTBOUND ***' --log-level 4
iptables -A OUTBOUND -j REJECT

And here the iptables output :

Current iptables rules (this may take awhile):

Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- * * 192.168.x.x 0.0.0.0/0
0 0 ACCEPT all -- * * xxx.xxx.x.xx 0.0.0.0/0
0 0 ACCEPT all -- * * xxx.xxx.x.xxx 0.0.0.0/0
0 0 DROP all -- eth0 * 0.0.0.0/0 255.255.255.255
0 0 DROP all -- * * 0.0.0.0/0 192.168.2.255
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
1 112 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 INBOUND icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 INBOUND all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2 168 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14
0 0 ACCEPT tcp -- * eth0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * eth0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- * eth0 192.168.x.x xxx.xxx.x.xx tcp dpt:53
0 0 ACCEPT udp -- * eth0 192.168.x.x xxx.xxx.x.xx udp dpt:53
0 0 ACCEPT tcp -- * eth0 192.168.x.x xxx.xxx.x.xx tcp dpt:53
0 0 ACCEPT udp -- * eth0 192.168.x.x xxx.xxx.x.xx udp dpt:53
0 0 ACCEPT tcp -- * eth0 192.168.x.x 0.0.0.0/0 tcp dpt:80
0 0 ACCEPT udp -- * eth0 192.168.x.x 0.0.0.0/0 udp dpt:80
0 0 ACCEPT tcp -- * eth0 192.168.x.x 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT udp -- * eth0 192.168.x.x 0.0.0.0/0 udp dpt:443
0 0 ACCEPT tcp -- * eth0 192.168.x.x 0.0.0.0/0 tcp dpt:993
0 0 ACCEPT udp -- * eth0 192.168.x.x 0.0.0.0/0 udp dpt:993
0 0 ACCEPT tcp -- * eth0 192.168.x.x 0.0.0.0/0 tcp dpt:6667
0 0 ACCEPT udp -- * eth0 192.168.x.x 0.0.0.0/0 udp dpt:6667
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 ACCEPT all -- * * 0.0.0.0/0 192.168.x.x
0 0 ACCEPT all -- * * 0.0.0.0/0 192.168.x.x
1 112 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 OUTBOUND all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain INBOUND (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `*** INBOUND ***'
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain OUTBOUND (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `*** OUTBOUND ***'
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- * * 192.168.x.0/24 192.168.x.0/24
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 239.255.255.250-239.255.255.250
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 239.255.255.250-239.255.255.250
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 224.0.0.22-224.0.0.22
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 224.0.0.22-224.0.0.22
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range xxx.xxx.x.xx-xxx.xxx.x.xx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range xxx.xxx.x.xx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 192.168.2.255-192.168.2.255
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 192.168.2.255-192.168.2.255
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 127.0.0.1-127.0.0.1
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 127.0.0.1-127.0.0.1
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 192.168.x.0/24 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 239.255.255.250-239.255.255.250
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 224.0.0.22-224.0.0.22
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 192.168.2.255-192.168.2.255
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 source IP range 127.0.0.1-127.0.0.1
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
1 84 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 192.168.x.0/24
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 239.255.255.250-239.255.255.250
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 224.0.0.22-224.0.0.22
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range xxx.xxx.x.xxx-xxx.xxx.x.xxx
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 192.168.2.255-192.168.2.255
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 192.168.x.x-192.168.x.x
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 140.211.166.66-140.211.166.66
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 destination IP range 127.0.0.1-127.0.0.1
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
1 84 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Please check if the above printed iptables rules are correct!

* moblock is running, pid is 8071.

As far as I understand, I don't have to be concerned anymore with moblock chains being correctly inserted before the other rules, but is there any rules in my script that could conflict with moblock's marking feature?

I have another question, not related to the post above. While using the tail command to monitor moblock's log, I have noticed that sometimes moblock stops and reload itself. I receive the following message in the log.

Got SIGHUP! Dumping and resetting stats, reloading blocklist

Is this normal? I guess while doing this, moblock is letting everything to pass through...

jre

October 27th, 2008, 03:03 PM

As far as I understand, I don't have to be concerned anymore with moblock chains being correctly inserted before the other rules, but is there any rules in my script that could conflict with moblock's marking feature?
The way you do it seems correct to me.
Just don't insert any rule that MARKs packages and always have the rules that send target to the moblock chains as first ones (so you chose correct to append them (-A) and not insert (-I) them).

I have another question, not related to the post above. While using the tail command to monitor moblock's log, I have noticed that sometimes moblock stops and reload itself. I receive the following message in the log.

Got SIGHUP! Dumping and resetting stats, reloading blocklist

Is this normal? I guess while doing this, moblock is letting everything to pass through...
No it doesn't. The problem you describe is only happening on "restart" when the iptables are removed and inserted again.
You can test it yourself: Ping a IP from the blocklist (e.g. your router with setting WHITE_LOCAL="2" so that it doesn't get whitelisted).
See the answers while moblock is not running.
Then start moblock: there will be a short break until moblock is loaded fully, then you will get rejects.
Then do a reload: Again a break and afterwards rejects, but no answers of the router.

This is because traffic is always sent by the iptables rules to userspace (NFQUEUE). If noone is listening there the packets will just get DROPed, but they may never leave userspace without someone (moblock) telling them so.

lovinglinux

October 27th, 2008, 03:57 PM

The way you do it seems correct to me.
Just don't insert any rule that MARKs packages and always have the rules that send target to the moblock chains as first ones (so you chose correct to append them (-A) and not insert (-I) them).

No it doesn't. The problem you describe is only happening on "restart" when the iptables are removed and inserted again.
You can test it yourself: Ping a IP from the blocklist (e.g. your router with setting WHITE_LOCAL="2" so that it doesn't get whitelisted).
See the answers while moblock is not running.
Then start moblock: there will be a short break until moblock is loaded fully, then you will get rejects.
Then do a reload: Again a break and afterwards rejects, but no answers of the router.

This is because traffic is always sent by the iptables rules to userspace (NFQUEUE). If noone is listening there the packets will just get DROPed, but they may never leave userspace without someone (moblock) telling them so.

Thank you again. I'm less worried now, but I still don't understand why moblock is reloading the blocklists if I didn't used the reload command. Does it reload by itself on regular basis?

jre

October 28th, 2008, 01:25 PM

Thank you again. I'm less worried now, but I still don't understand why moblock is reloading the blocklists if I didn't used the reload command. Does it reload by itself on regular basis?

Oh, didn't I mention that? ;-)
This is caused by the cron job (/etc/cron.daily/moblock). Once a day the blocklsits are updated. afterwards MoBlock gets reloaded.
You can turn this automatic update off by setting in /etc/default/moblock:
MOBLOCK_CRON="0"

Still, a manual "moblock-control update" does a reload at the end, too.

skipo

October 28th, 2008, 01:47 PM

Oh, didn't I mention that? ;-)
This is caused by the cron job (/etc/cron.daily/moblock). Once a day the blocklsits are updated. afterwards MoBlock gets reloaded.
You can turn this automatic update off by setting in /etc/default/moblock:
MOBLOCK_CRON="0"

That won't turn off the daily reloading though.

lovinglinux

October 28th, 2008, 03:36 PM

That won't turn off the daily reloading though.

Yep. I have MOBLOCK_CRON="0" and it still reload.

jre

October 30th, 2008, 01:56 PM

Strange ....
Please look in /var/log/moblock-control.log what is happening at the time when moblock reloads. From moblock-control this will only happen on "update" (either manually or by the cron job) or "reload".
I'm not the author of MoBlock (the daemon). Maybe there is something built in there that reloads it frequently.

Still, whatever the reason for the reload is: I see no reason to worry, since (as shown above) the reload does not break the protection. But of course I'd like to know what's happening there, too ;-)

skipo

October 31st, 2008, 07:12 AM

Strange ....
Please look in /var/log/moblock-control.log what is happening at the time when moblock reloads. From moblock-control this will only happen on "update" (either manually or by the cron job) or "reload".
I'm not the author of MoBlock (the daemon). Maybe there is something built in there that reloads it frequently.

Moblock-control.log doesn't say anything about reloading, but moblock.log gives following statement:

Fri Oct 31 13:00:10| Got SIGHUP! Dumping and resetting stats, reloading blocklist

jre

October 31st, 2008, 11:53 AM

skipo

October 31st, 2008, 02:25 PM

Well, then I have to say I have no idea why this happens.
I've never heard of it, but maybe there's a cron job sending the SIGHUP (kill -s HUP/1 PID) to all processes. If anybody can explain this ...
I'll note this down in BUGS with a link to your post.

It's the logrotate. In /etc/logrotate.d/ is a file moblock:

/var/log/moblock.log {
rotate 12
daily
compress
delaycompress
missingok
notifempty
postrotate
[ ! -f /var/run/moblock.pid ] || kill -s HUP `cat /var/run/moblock.pid`
endscript
}
Or is it moblock because it did put the file there...

lovinglinux

November 3rd, 2008, 03:29 AM

@jre,

moblock is not starting at boot on Intrepid and mobloquer is not working.

skipo

November 3rd, 2008, 05:45 AM

I'll note this down in BUGS with a link to your post.

If we are talking about bugs, sometimes this line appears in /var/log/moblock.log:

Mon Nov 3 11:25:21| NFQUEUE: unbinding from queue 0

After that, I have to restart moblock to get web working again.

I haven't changed the nfqueue number, so it should bind to the default queue, and it does after restart:

Mon Nov 3 11:33:52| NFQUEUE: binding to queue '92'

jre

November 3rd, 2008, 05:09 PM

@skipo, logrotate:
oops, I should have thought of that. Of course, after logrotation a new logfile needs to be opened, therefore the reloading. So everything is ok here. Thanks for figuring that out on your own!

@lovinglinux, intrepid problems:
first time I hear this. What's in the logfiles? Does "moblock-control start" work? What's happening if you start mobloquer from the console?

@skipo: unbinding from NFQUEUE
I changed the default NFQUEUE number to 92 (instead of 0) in moblock-control 1.0 (the current version), to avoid conflicts with other firewalls. So I don't know where the queue 0 stems from - it should always be 92.
Have you any other applications that use NFQUEUE?
Did you have the unbind in previous versions, too?
For the records: Please post "dpkg -l libnetfilter-queue* libnfnetlink*".
It might be a bug in these libraries or in moblock, which occurs only for non-default queue numbers (= not 0).

noblem

November 3rd, 2008, 06:10 PM

Re: unbinding from NFQUEUE

The error message in the code has a queue number of 0 hard coded, so it's misreporting the queue it just unbound from. I've seen the error myself, with moblock the only application using nfqueue.

If i'm understanding the code correctly, then recv() is used to read a message from kernelspace and passed to nfq_handle_packet() for parsing. The unbind error should only ever occur if the recv() returns an error which generally should never happen

After doing some more reading, recv() gets the data from netlink socket, prior to any queuing happening. The code doesn't capture the error code when this fails, but it could be due to a lack of buffer space (especially under high load). The l7 userspace filter code suggest the following;

If you get error messages about running out of buffer space, increase it with something like:

echo 524280 > /proc/sys/net/core/rmem_default
echo 524280 > /proc/sys/net/core/rmem_max
echo 524280 > /proc/sys/net/core/wmem_default
echo 524280 > /proc/sys/net/core/wmem_max

lovinglinux

November 3rd, 2008, 10:59 PM

@lovinglinux, intrepid problems:
first time I hear this. What's in the logfiles? Does "moblock-control start" work? What's happening if you start mobloquer from the console?

Mea culpa! The problem was due to /etc/default/moblock permissions. I have replaced the one from fresh install with a copy and root user hasn't permission to read and write. Everything is working now.

skipo

November 4th, 2008, 05:35 AM

For the records: Please post "dpkg -l libnetfilter-queue* libnfnetlink*".
It might be a bug in these libraries or in moblock, which occurs only for non-default queue numbers (= not 0).

Here's the dpkg list:

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-f/Unpacked/Failed-cfg/Half-inst/t-aWait/T-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name Version Description
+++-===================-==============-======================================
ii libnetfilter-queue1 0.0.13-1 Netfilter netlink-queue library
ii libnfnetlink0 0.0.25-1 Netfilter netlink library

I have no other applications using NFQUEUE.

noblem

November 7th, 2008, 08:48 AM

I found this article about tuning netfilter performance;
http://www.inliniac.net/blog/2008/01/23/improving-snort_inlines-nfq-performance.html

The article is aimed at snort_inline users, but the majority of it applies to moblock as well. Moblock doesn't currently allow the max queue size to be changed from the default, however I've just submitted a patch that allows this value to be tuned on the moblock developer site. The patch also fixes the misreported queue number in the error message and should hopefully print the error that caused moblock to unbind in the first place

Matt

noblem

November 14th, 2008, 09:47 AM

Just when I though I'd not seen the unbinding error on the RC of version 9, I got this after moblock did it's daily update the other morning;

Thu Nov 13 07:36:08| NFQUEUE: unbinding from queue '92', recv returned No buffer space available

So good news is my patch worked and captured the error, the bad news is when this happens moblock currently needs to be killed and restarted to bring it back to life. I've managed to replicate the issue which, for me, occurs under high load when a moblock-control restart is executed. While moblock is reloading the block files it's not processing packets and data is getting buffered, if too much data is buffered then we run out of buffer space and die.
I've managed to find another bug that occurs when this happens, moblock tries to cleanly close the queue but the shutdown messages don't work because of the lack of buffers.
I've created another patch that works around this and I've chosen to rebind the queue rather than exit, which works for me.
Interestingly while I was testing I reduced the queue size and found the issue went away, however I had lots of these errors logged;

nf_queue: full at 128 entries, dropping packets(s).

So looks like with a smaller queue size the packets are dropped by the kernel before hitting moblock rather than hitting moblock and causing it to run out of buffers

Matt

jre

November 14th, 2008, 01:23 PM

Hi noblem,

first off thanks for your intensive investigations and your patches at moblock.berlios.de!
I'm no programmer, but understand what you explain. Indeed this matches prior reports of unbinding which was fixed by only sending NEW traffic to MoBlock.
What happens if you increase the buffer size (together with your other patches)?

jre

noblem

November 14th, 2008, 04:49 PM

@jre I'm know programmer either but I understand enough of the the code to be able to figure out what it's doing and with the help of google hopefully fix it :)

Only sending new packets to moblock would certainly help as moblock would have to buffer less data and therefore would be less likely to hit the issue.I've increased the buffers significantly but still run out of space under heavy load but only reloading the block lists but with my modifications moblock now rebinds to the queue and keeps going rather than dying. I'm not convinced this is the right approach on a reload, but it works for me.

I've also come across this post (http://lists.netfilter.org/pipermail/netfilter-devel/2007-June/028164.html) on the netfilter-devel list which has a very good explanation of the causes of the issue

Sevis

November 19th, 2008, 06:58 PM

Good evening,

I'm sorry if this question was answered before, but I didn't find a clear answer on the first few pages...

Anyway, moblock seems to block all http for me, while still allowing some other connections (I'm not entirely sure which, but I can talk over MSN, for example). Here is the output of 'sudo moblock-control status':

sevis@saruman-desktop:~$ sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 499K packets, 112M bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain OUTPUT (policy ACCEPT 789K packets, 813M bytes)
pkts bytes target prot opt in out source destination
2 142 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- * * 192.168.1.0/24 192.168.1.0/24
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- * * 192.168.1.0/24 0.0.0.0/0
0 0 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 192.168.0.0/24 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0/24
0 0 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 192.168.0.0/24
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
2 142 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Please check if the above printed iptables rules are correct!

* moblock is not running.

Also, please note that moblock was running at that time - at least, I had used 'sudo moblock-control start', and it was blocking http quite successfully.

In /etc/default/moblock, I have, after the autogenerated comments:

WHITE_IP_IN="192.168.0.0/24"
WHITE_IP_OUT="192.168.0.0/24"
WHITE_TCP_OUT="80 8080 443"

Thank you!
Sevis

fixture

November 21st, 2008, 03:45 AM

Hi, jre, thanks for the good work.

I have a problem that seems to be universally unanswered. So, I have ubuntu hardy server on an x86 router. The router hosts a wired lan and a wireless lan. I use Shorewall to configure iptables for maquerading and firewalling. What do I have to do to get moblock for filter the traffic for the router and the lans?

If shorewall cannot be made to work with moblock easilly, what other firewall frontend should I use? Thanks,

typo99

November 21st, 2008, 05:28 PM

I'm interested to hear an answer to this also. I have the same problem with the same /etc/default/moblock setup. Can get to my lan ok, but web is blocked. Maybe something to do with adding in TBG blocklists?

*EDIT* - Took out these lines in my /etc/moblock/blocklists.list and it is working again:

tbg.iblocklist.com/Lists/PrimaryThreats.zip
tbg.iblocklist.com/Lists/GeneralCorporateRanges.zip
tbg.iblocklist.com/Lists/BusinessISPs.zip
tbg.iblocklist.com/Lists/SearchEngines.zip
tbg.iblocklist.com/Lists/Educational-Institutions.zip
tbg.iblocklist.com/Lists/Bogon.zip
tbg.iblocklist.com/Lists/Hijacked.zip

I had read the TBG lists were good to use, but I'll have to leave them out I guess.

Good evening,

I'm sorry if this question was answered before, but I didn't find a clear answer on the first few pages...

Anyway, moblock seems to block all http for me, while still allowing some other connections (I'm not entirely sure which, but I can talk over MSN, for example). Here is the output of 'sudo moblock-control status':

sevis@saruman-desktop:~$ sudo moblock-control status
Current iptables rules (this may take awhile):

Chain INPUT (policy ACCEPT 499K packets, 112M bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_in all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 moblock_fw all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain OUTPUT (policy ACCEPT 789K packets, 813M bytes)
pkts bytes target prot opt in out source destination
2 142 moblock_out all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW MARK match !0x14

Chain moblock_fw (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- * * 192.168.1.0/24 192.168.1.0/24
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_in (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa
0 0 RETURN all -- * * 192.168.1.0/24 0.0.0.0/0
0 0 RETURN all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 192.168.0.0/24 0.0.0.0/0
0 0 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Chain moblock_out (1 references)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xa reject-with icmp-port-unreachable
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0/24
0 0 RETURN all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 RETURN all -- * * 0.0.0.0/0 192.168.0.0/24
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080
0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
2 142 NFQUEUE all -- * * 0.0.0.0/0 0.0.0.0/0 NFQUEUE num 92

Please check if the above printed iptables rules are correct!

* moblock is not running.

Also, please note that moblock was running at that time - at least, I had used 'sudo moblock-control start', and it was blocking http quite successfully.

In /etc/default/moblock, I have, after the autogenerated comments:

WHITE_IP_IN="192.168.0.0/24"
WHITE_IP_OUT="192.168.0.0/24"
WHITE_TCP_OUT="80 8080 443"

Thank you!
Sevis

Sevis

November 22nd, 2008, 08:28 AM

Hmm, I checked /etc/moblock/blocklists.list but I don't have any of those blocklists. They are custom, as far as I understand? I am using the default blocklists, to be precise:

www.bluetack.co.uk/config/ads-trackers-and-bad-pr0n.gz
www.bluetack.co.uk/config/bogon.gz
www.bluetack.co.uk/config/dshield.gz
#www.bluetack.co.uk/config/edu.gz
www.bluetack.co.uk/config/fornonlancomputers.gz
www.bluetack.co.uk/config/hijacked.gz
www.bluetack.co.uk/config/iana-multicast.gz
www.bluetack.co.uk/config/iana-private.gz
www.bluetack.co.uk/config/iana-reserved.gz
www.bluetack.co.uk/config/level1.gz
www.bluetack.co.uk/config/level2.gz
#www.bluetack.co.uk/config/level3.gz
www.bluetack.co.uk/config/Microsoft.gz
www.bluetack.co.uk/config/proxy.gz
#www.bluetack.co.uk/config/rangetest.gz
#www.bluetack.co.uk/config/spider.gz
#www.bluetack.co.uk/config/spyware.gz
www.bluetack.co.uk/config/templist.gz

#locallist /etc/moblock/custom-blocklist.p2p

On another note, my log file (/var/log/moblock.log) is filled with "Skipping useless range:" and then a name or title. At the end, there are quite a few lines like:

Sat Nov 22 13:17:25| OUT: IANA - Private Use [RFC1918],hits: 1,DST: 10.0.0.2

Seeing as 10.0.0.2 is my DNS, I suppose that this would be the problem - should I unblock it in my defaults file? I have the feeling this would allow everything, but I am not all too good in the area of firewalls.

Thank you,
Sevis

noblem

November 25th, 2008, 10:29 AM

@typo99 The tbg Bogon list also includes the RFC1918 private ranges so you'll probably fine you've been blocking your internal network (the moblock logs should tell you what's being blocked). You also might not necessarily need ever single blocklist loaded, unless your totally paranoid :)

@sevis Yours is likely a similar issue, however I'm not sure why your seeing it being dropped OUT, normally that would mean out to the NET where private addresses shouldn't be routed - obviously though it depends on your network setup.
In your case you probable need to remove the fornonlancomputers from your blocklist file and possibly iana-private and typo99 remove the Bogon list.

Alternatively you could try to whitelist your lan in the config file, although this didn't work for me (due to the way I'm using nat and forwarding traffic I think). I've use the IP_REMOVE option to remove my lan range, although this removed all of 192.168.x.x/16 from the blocklist, so I've created a custom blocklist covering all of 192.168.x.x except my lan range just so I'm covered

lovinglinux

November 25th, 2008, 11:33 AM

noblem

November 25th, 2008, 03:59 PM

lovinglinux

November 25th, 2008, 04:21 PM

The allow.p2p file may not have the desired effect as it creates iptables rules to allow traffic out to the allowed range, in from the allowed range and forwarded traffic from either a source or destination of the allowed range.

This is fine if you want to allow an host/range that's external to the local lan (which I'm guessing was the idea). If your trying to use it to allow traffic from your local lan the in and out will be backwards and all forwarded traffic will bypass moblock totally which probably isn't what you want, especially if the moblock host is doing nat for your internal network.

The WHITE_LOCAL option may work, but forwarding is still going to be a problem so removing the lan range from the blocklist is probably the safest option

That's why you can configure /etc/default/moblock with the following rules:

ALLOW_IN="$CONF_DIR/allow-in.p2p"
ALLOW_OUT="$CONF_DIR/allow-out.p2p"
ALLOW_FW="$CONF_DIR/allow-fw.p2p"

This way you can create different allow lists for INBOUND, OUTBOUND and FORWARD traffic.

BTW, the local network whitelisting feature is still experimental, so again, using the alow lists is the best way.

EDIT: I forgot to mention that the iptables rules created by the allow lists are related only to traffic marked by moblock, which means that if you want to confine traffic on local ranges to the local network, all you have to do is create iptables that allow local traffic but block external access to those ranges. This can be done manually inserting iptables rules, using a firewall manager like Firestarter or using moblock's custom scripts. This gives a lot of flexibility to control your traffic, as along as you understand how iptables works.

noblem

November 26th, 2008, 04:56 AM

@lovinglinux It sounds like your moblock-control script is creating different rules from mine and sounds like it might actually work.
I think the best advise we can give anyone would be to ensure the iptables rules are sending traffic to moblock and it's actually blocking what you expect. You don't want to inadvertently bypass moblock by excluding the wrong thing :grin:

noblem

November 26th, 2008, 09:26 AM

lovinglinux

November 26th, 2008, 11:23 AM

OK, I've now defiantly got the latest moblock-control script, from the (from package 1.0-1 for debian/sid but shouldn't be any different for any other variant). The script adds the following lines for IPs in the allow file(s)

iptables -I moblock_in -m iprange --src-range allow_range -j RETURN
iptables -I moblock_out -m iprange --dst-range allow_range -j RETURN
iptables -I moblock_fw -m iprange --dst-range allow_range - j RETURN
iptables -I moblock_fw -m iprange --src-range allow_range - j RETURN

Assuming that moblock is running on a gateway box with a LAN interface and a Internet interface, the in and out rules should work fine for traffic in/out of the LAN interface. No traffic with a LAN IP should be sent to the internet, so that's fine
However any forwarded traffic from or to the LAN will match the rules in the moblock_fw and won't even be sent to moblock.

The WHITE_LOCAL would seem the more appropriate option to use (even if experimental) but looks like it needs a bit of work.

I can't see any easy way to correctly whitelist forwarded traffic without messing around with rules in the NAT table but being a bit more selective with the blocking list is probably easier/safer

I don't have a gateway so my FORWARD rules are all denied. Anyway, as long as I understand, if you don't add the local ranges to allow-fw.p2p, moblock will not RETURN local traffic directed to moblock_fw chain to FORWARD chain, so traffic will be filtered as expected by moblock and no local traffic will be forwarded.

Even if the local traffic passes through moblock, you still can create FORWARD rules in the iptables to prevent local ranges traffic to be forwarded. Then, local traffic being forwarded will not be marked by moblock and will RETURN to the FORWARD iptables chain, where it will be REJECTed or DROPped.

noblem

November 27th, 2008, 07:44 AM

Adding the LAN range to the allow-fw.p2p will mean it's not passed to moblock and therefor any traffic that's being routed for the moblock host (In my case any traffic from a PC being NATed by the server running moblock) won't be protected. This is probably a bad thing and ensuring traffic passing through the forward chain is passed through moblock would be highly desirable in most cases.

Traffic entering the forward chain is going to have either a source or destination of a local LAN address and moblock checks both source and destination against the blocklist for traffic in the forward chain. This means that if your LAN range is included in the blocklist it's always going to be flagged as bad.

Obviously it's possible to add custom iptables rules to control what is or isn't blocked, but I can't think of one that will work in this case s the only option is to ensure your LAN range isn't on the blocklist.

lovinglinux

November 27th, 2008, 11:19 AM

jre

November 27th, 2008, 02:08 PM

@Sevis:
With this setup no traffic on port 80 (http) should be blocked! Your config seems to be correct.
But it seems that your MoBlock daemon was not running, perhaps it crashed. Check /var/log/moblock-control.log and /var/log/moblock.log to see why/if the daemon crashes.
Please make sure that the daemon is running. Then check in /var/log/moblock.log if MoBlock is really blocking the sites that you want to access.
... I just read your next post:
At the end, there are quite a few lines like:

Sat Nov 22 13:17:25| OUT: IANA - Private Use [RFC1918],hits: 1,DST: 10.0.0.2

Seeing as 10.0.0.2 is my DNS, I suppose that this would be the problem - should I unblock it in my defaults file? I have the feeling this would allow everything, but I am not all too good in the area of firewalls.
I think your right. Just use
WHITE_IP_OUT="10.0.0.2".

@lovinglinux and noblem:
Great to have you here! I think you came to the correct conclusions. I've already thiought much about FORWARD, but I don't use it so I could never test it. But you are right (Other readers be careful, this relates only to FORWARD (Moblock is running on a router):

Don't use the allowlist or WHITE_IP_FORWARD to whitelist LAN traffic. This would allow all traffic.
The automatical whitelisting will whitelist the LAN for FORWARD in other ways: Only traffic with source AND destination in the LAN gets whitelisted here. This solves the above problem, but:
... still leaves you with all forwarded traffic from/to the internet being blocked. So probably it's indeed the best thing to just remove the LAN range, as noblem said.

@Sevis:
On another note, my log file (/var/log/moblock.log) is filled with "Skipping useless range:" and then a name or title.
That's normal. It's a result of the merging of several blocklists.

Unrelated comment: You added this to whitelist your LAN:
WHITE_IP_IN="192.168.0.0/24"
WHITE_IP_OUT="192.168.0.0/24"
But the automatic whitelisting chose 192.168.1.0/24
So your entries seem both unnecessary and incorrect.

@typo99:
LAN-access-problems have nothing to do with the TBG blocklists. The old default bluetack blocklists had the LAN blocked, too. This is why whitelisting the LAN is necessary, but this happens automatically per default.

@fixture:
This is in the documentation (in short words: just make sure MoBlock is started after shorewall and gets restarted after any shorewall change.):
Since version 0.9, MoBlock no longer conflicts with other firewalls. Make sure
the following three conditions hold:
- MoBlock marks non-matched (IP is not in the blocklist)
packets. (The marking feature is on per default. It
will be explained and asked for later.)
- Other firewalls do not mark packets.
- MoBlock is started after other firewalls. If other
firewalls are started/reloaded after MoBlock, then you
need to restart MoBlock again. You will be fine, if the
iptables rules which send traffic to MoBlock's iptables
chains (moblock_in, moblock_out and moblock_fw) stand
before all other iptables rules which ACCEPT traffic.

You can check your iptables rules with
iptables -L -nv
or
moblock-control status.

Sevis

November 27th, 2008, 06:57 PM

I\'m sorry for the late reply, but it seems to work very well, thank you! Didn\'t even need to allow MSN separately, worked well enough without it :);

moore.bryan

November 28th, 2008, 04:12 PM

sorry if this has already been handled, but are the bluetack lists down? i can't seem to update...

jre

December 1st, 2008, 05:47 PM

sorry if this has already been handled, but are the bluetack lists down? i can't seem to update...

What do you have in your /etc/moblock/blocklists.list?

The lists from bluetack are indeed partly down, atm. See http://www.bluetack.co.uk/forums/index.php

I'm working on a release which allows php redirects. Then all lists by iblocklist will be supported and I'll change default lists to TBG instead of bluetack.
In the meantime you can use the lists from http://tbg.iblocklist.com/Lists or just wait until the bluetack lists are updated again.

@Sevis: Glad to hear.

nidya

December 6th, 2008, 02:02 PM

Hey, I just wanted to know why Moblock and Mobloquer are not listed in the Synaptic Package Manager. I use Ubuntu 8.10 64 Bit Alternate Version (I need RAID support). The installation process would have been much painless :D ... I just can't get used with this terminal stuff. Windows screwed my head I guess...

Btw Mobloquer seems to not work well with custom themes for Ubuntu. It's all black for me. I mean everything is black, though I can read the written stuff and see some borders...

moore.bryan

December 6th, 2008, 09:55 PM

What do you have in your /etc/moblock/blocklists.list?

The lists from bluetack are indeed partly down, atm. See http://www.bluetack.co.uk/forums/index.php

I'm working on a release which allows php redirects. Then all lists by iblocklist will be supported and I'll change default lists to TBG instead of bluetack.
In the meantime you can use the lists from http://tbg.iblocklist.com/Lists or just wait until the bluetack lists are updated again.
thanks for the info... how exactly would i set-up moblock to use the tbq lists instead of bluetack? i tried simply replacing the bluetack with those from tbq in blocklists.list, but i get an error in mobloquer about not being able to find bluetack.

jre

December 7th, 2008, 07:12 AM

Hey, I just wanted to know why Moblock and Mobloquer are not listed in the Synaptic Package Manager.

I created the packages moblock, moblock-control and mobloquer personally. I'm no Ubuntu or Debian developer and have not tried to add my packages to the official repositories. If I would do so I would prefer the Debian repo, because this means they will get to Ubuntu automatically.

Although I put no efforts to this topic, there's already a "request for packaging" here: https://bugs.launchpad.net/ubuntu/+bug/109822

Further please remember that using this software will always be more then just installing it. You can run in serious network problems, if you don't remember that MoBlock might just be blocking big parts of your internet access.

Btw Mobloquer seems to not work well with custom themes for Ubuntu. It's all black for me. I mean everything is black, though I can read the written stuff and see some borders...

The creator of mobloquer unfortunately had to stop his development efforts, due to personal time restraints. I'll note your report down, but can't promise anything ...

thanks for the info... how exactly would i set-up moblock to use the tbq lists instead of bluetack? i tried simply replacing the bluetack with those from tbq in blocklists.list, but i get an error in mobloquer about not being able to find bluetack.

Thanks for reporting this. This origins from a check if the update server is accessible at all, which is executed before the updating. So add to your /etc/default/moblock:
TESTHOST="iblocklist.com"

Seems as if I have to make a minor update today to reflect these changes.

EDIT: Done. I released a version (1.1-1) which uses tbg.iblocklist.com URLs and also has the new TESTHOST. Funnily, since today bluetack has a new server again.

dbzkid

December 9th, 2008, 06:24 AM

Ive installed moblock and i whitelisted my lan, but here is tyhe deal im useing cablevision as my isp and moblock keeps blocking that ip and also blocks microsoft (for msn in pidgin) and i was wondering if it was ok to whitelist the ip for my isp and the msn ip? because if i leave it it wont let me go on the internet but if i whitelist it it will let me go on the internet like websurfing ect. thanks

lovinglinux

December 9th, 2008, 10:13 AM

Bobomonkey

December 13th, 2008, 10:34 PM

I'm having a slight issue getting adding the gpg key to the apt key ring.

--keyserver wwwkeys.eu.pgp.net --recv 9072870B
gpg: requesting key 9072870B from hkp server wwwkeys.eu.pgp.net
gpg: can't open `/home/bobo/.gnupg/pubring.gpg'
gpg: keydb_get_keyblock failed: eof
gpg: no writable keyring found: eof
gpg: error reading `[stream]': general error
gpg: Total number processed: 0

If anyone could help me figure out what is causing this and a way to fix it that would be awesome and much appreciated.

jre

December 14th, 2008, 12:28 PM

I'm having a slight issue getting adding the gpg key to the apt key ring.
I'm not very common with this, but what command did you issue?
This should work:
gpg --keyserver wwwkeys.eu.pgp.net --recv 9072870B
gpg --export --armor 9072870B | sudo apt-key add -

unf4b1x

December 18th, 2008, 04:28 PM

I'd like to post this here since this is the "General Moblock thread."

The installation of moblock went fine up until when the package configuration pops up inside the terminal. I mean there is no other menus or buttons except this "<Ok>", how dyou get out from that??? Because if I do <ESC> the installation seems to backtrack and produces these errors:

dpkg: error processing moblock-control (--configure):
subprocess post-installation script returned error exit status 10
...
...
Errors were encountered while processing:
moblock-control
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install. Trying to recover:
...
dpkg: error processing moblock-control (--configure):
subprocess post-installation script returned error exit status 10
Errors were encountered while processing:
moblock-control
...

.. and then tries to recover, then pops up the package configuration window again. (but since I don't know any other exit commands, and the OK button seems isnt working..), I guess if only I could close down the package configuration window normally, maybe it won't produce any errors.

jre

December 18th, 2008, 04:49 PM

Super Jamie

December 18th, 2008, 07:52 PM

you might want to add a bit to the wiki page about portforwards, there's no mention of the WHITE_TCP_IN= option, which i needed to add to /etc/default/moblock to get my hosted webpages (ntop and webmin), ftpd and sshd working again, as well as torrent ports, which is the whole point of moblock anyway, right?

cat /etc/default/moblock
# moblock.default - default configuration file for moblock-control

# In this file you can put any configuration variable from moblock.conf
# (/etc/moblock/moblock.conf). Values in moblock.conf will be overwritten by
# values in this file (moblock.default).

# Do a "moblock-control restart" when you have edited this file.
WHITE_TCP_OUT="1:65535"
WHITE_TCP_IN="20-22 3000 10000 20000:20009"
WHITE_IP_IN="20x.x.x.x/29"
WHITE_IP_OUT="20x.x.x.x/29"

also, by default, moblock seems to assume your subnet mask is /24, and whitelists that as the local lan. not so much a problem if you're on a smaller subnet like my /29, but perhaps an issue if you're on a larger subnet like a /23 or /16. i guess that's an upstream bug

Zeikcied

December 18th, 2008, 09:34 PM

I'm having a bit of a problem. I know this isn't necessarily a Moblock issue as much as it is a block list problem, though.

Recently, I'm guessing since the switch to the new lists, I've been unable to connect to any ed2k servers using MLDonkey. I believe I tried aMule, and got similar results.

It almost seems like every ed2k server on my servers list (both programs, even) is blocked or not responding. I've noticed that, in the console window in MLDonkey (or in my case KMLDonkey), some servers are saying that my port is not responding, even though I've made no changes in port fowarding (I checked and the port is properly forwarded).

Since I don't think this is a Moblock issue (more a block list issue), I doubt I'll get much help. It's just a bit of an annoyance and I'm hoping for some advice either way.

unf4b1x

December 19th, 2008, 12:04 AM

Just press the "OK".

This is a so called "debconf" question. If your debconf interface doesn't support your mouse you have to use your keyboard: hit the "TAB" key until "OK" is highlighted and then press "RETURN".

You may also do a "sudo dpkg-reconfigure debconf" and select "Gnome" as your interface. Then you can use your mouse for debconf questions.

Thanks a lot. It works fine now.

Btw, as I was reinstalling it again,
1. Would it work fine too if I would install Mobloquer also?
2. Wouldn't there be any conflicts?
3. Having to use Mobloquer, does it integrate to iptables as well as Moblock?
4. Are there any security issues that I should know about Moblock? Or could you direct me to what site I should be reading?

Anyways, more power!

lovinglinux

December 19th, 2008, 02:51 AM

Thanks a lot. It works fine now.

Btw, as I was reinstalling it again,
1. Would it work fine too if I would install Mobloquer also?
2. Wouldn't there be any conflicts?
3. Having to use Mobloquer, does it integrate to iptables as well as Moblock?
4. Are there any security issues that I should know about Moblock? Or could you direct me to what site I should be reading?

Anyways, more power!

Short answers:

1.yes
2.no
3.no
4. start it after firewall managers

Long answers:

1+2. Mobloquer is just a GUI to control/manage moblock-control functions and settings. It was designed to be installed with moblock and can't work alone. Nevertheless, you can use and control moblock without mobloquer using commands.

3. Moblock add it's rules (ip filtering) to the iptables and it also has custom scripts for adding regular customized rules. But mobloquer does not provide an iptables manager GUI like Firestarter or Gufw. You can add your rules to the custom scripts and moblock will run them when stopping and starting, even if you don't have mobloquer installed. If you don't need to change the iptables rules frequently, you can get rid of Firestarter and use only moblock scripts. That works pretty fine.

4. Not that I'm aware of, but I'm not a security expert. If you use a firewall manager like Firestarter, you need to start it before moblock, otherwise it will override moblock's rules. You can learn more about it here (http://moblock-deb.sourceforge.net/) and here (http://mobloquer.foutrelis.com/).

I'm having a bit of a problem. I know this isn't necessarily a Moblock issue as much as it is a block list problem, though.

Recently, I'm guessing since the switch to the new lists, I've been unable to connect to any ed2k servers using MLDonkey. I believe I tried aMule, and got similar results.

It almost seems like every ed2k server on my servers list (both programs, even) is blocked or not responding. I've noticed that, in the console window in MLDonkey (or in my case KMLDonkey), some servers are saying that my port is not responding, even though I've made no changes in port fowarding (I checked and the port is properly forwarded).

Since I don't think this is a Moblock issue (more a block list issue), I doubt I'll get much help. It's just a bit of an annoyance and I'm hoping for some advice either way.

Run this command tail -f /var/log/moblock.log or use the mobloquer logging feature to pinpoint which IP address is blocked when you try to connect to the server, then add this IP to your "/etc/moblock/allow.p2p" file or use the whitelist feature of mobloquer GUI.

you might want to add a bit to the wiki page about portforwards, there's no mention of the WHITE_TCP_IN= option, which i needed to add to /etc/default/moblock to get my hosted webpages (ntop and webmin), ftpd and sshd working again, as well as torrent ports, which is the whole point of moblock anyway, right?

cat /etc/default/moblock
# moblock.default - default configuration file for moblock-control

# In this file you can put any configuration variable from moblock.conf
# (/etc/moblock/moblock.conf). Values in moblock.conf will be overwritten by
# values in this file (moblock.default).

# Do a "moblock-control restart" when you have edited this file.
WHITE_TCP_OUT="1:65535"
WHITE_TCP_IN="20-22 3000 10000 20000:20009"
WHITE_IP_IN="20x.x.x.x/29"
WHITE_IP_OUT="20x.x.x.x/29"

also, by default, moblock seems to assume your subnet mask is /24, and whitelists that as the local lan. not so much a problem if you're on a smaller subnet like my /29, but perhaps an issue if you're on a larger subnet like a /23 or /16. i guess that's an upstream bug

I'm afraid that using "1:65535" in the WHITE_TCP_OUT will make moblock ignore all outgoing traffic. If you are using it for p2p, then this is really bad, because your client will be able to connect to peers blocked by the ip lists if the connection is requested by your client. It will block incoming connections but not outgoing.

You don't need to allow any outgoing or incoming ports to use p2p, because moblock will filter IP's and not ports. If you allow a port, then it will be completely ignored by the filter, regardless of the IP source or destination. If you are having trouble to connect to peers, then you should consider using less blocklists, not whitelisting ports.

If you access your machine with ssh from remote machines outside your LAN, then you can allow only the IP's of those machines instead of allowing the port. Unfortunately, this is not feasible if the remote machines have dynamic IP's.

jre

December 19th, 2008, 12:13 PM

you might want to add a bit to the wiki page about portforwards, there's no mention of the WHITE_TCP_IN= option, which i needed to add to /etc/default/moblock to get my hosted webpages (ntop and webmin), ftpd and sshd working again, as well as torrent ports, which is the whole point of moblock anyway, right
First off, feel free to edit the wiki yourself, I would really appreciate this (I'm terribly short on time, currently)! Don't worry to write anything wrong - I'm notified of all changes, so I can correct things ...
Indeed WHITE_TCP_IN might be added as a separate question to the wiki page.
But the torrent ports must not be added! It's (one of) the point(s) of MoBlock to check exactly this traffic!

EDIT: Just had a closer look at your whitelisted ports: lovinglinux is right, you are whitelisting much too many ports. Allowing all traffic on OUT will most probably not be what you want.

also, by default, moblock seems to assume your subnet mask is /24, and whitelists that as the local lan. not so much a problem if you're on a smaller subnet like my /29, but perhaps an issue if you're on a larger subnet like a /23 or /16. i guess that's an upstream bug

This is a matter of moblock-control, so in this case I am upstream. I'll think about a solution for this. Until then, I recommend to manually whitelist the LAN (either via /etc/moblock/allow.p2p or the WHITE_IP_... variables).

Thanks
jre

Just_a_man

December 29th, 2008, 04:43 AM

Hi

i did install moblock and it works just fine if i remember restart it always when i play whit the firewall.

And my promblem is that can you put a start up script in firestarter firewall so if it restarts/makes changes to it's firewall it restarts moblock.

or can you just take the iptable commands out of the moblock and use pre-firewall for cleaning the traffic

This is little bit a firestarter problem but it will help hundreds absent-minded persons who uses moblock.

astarmathsandphysics

December 31st, 2008, 07:32 PM

I have a problem with moblock. It didn't install properly and now I can't install or uninstall any programs. I get this message.

E: dpkg was interrupted, you must manually run 'dpkg --configure -a' to correct the problem.
E: _cache->open() failed, please report.

When I type dpkg --configure -a into a terminal I opens the moblock screen and I can't work out how to configure or uninstall it. Any offers?

jre

January 1st, 2009, 12:38 PM

When I type dpkg --configure -a into a terminal I opens the moblock screen and I can't work out how to configure or uninstall it. Any offers?

Quoting https://help.ubuntu.com/community/MoBlock#I%20tried%20to%20install%20MoBlock%20but%2 0I%27m%20stuck%20on%20a%20screen%20with%20a%20Mobl ock%20warning

I tried to install MoBlock but I'm stuck on a screen with a Moblock warning

This is a so called "debconf" question. Read the text and confirm by pressing "OK". If your debconf interface doesn't support your mouse, then you have to use your keyboard: hit the "TAB" key until "OK" is highlighted and then press "RETURN".

@Just_a_man: I'm not common with firestarter. but if someone has a solution I'd be glad to spread the word :-)
Both ways that you describe would be nice. I'd prefer the one with an automatic "moblock-control restart"

jre

January 5th, 2009, 11:31 AM

also, by default, moblock seems to assume your subnet mask is /24, and whitelists that as the local lan. not so much a problem if you're on a smaller subnet like my /29, but perhaps an issue if you're on a larger subnet like a /23 or /16. i guess that's an upstream bug

I've just fixed that. The subnetmask gets detected automatically now, too. It's already in the svn repository. I'll release the new moblock-control 1.2 soon.

feistybird

January 9th, 2009, 12:25 AM

Hi,

My moblock suddenly blocks all my internet traffic, and I've tried various workarounds mentioned in the Ubuntu Help page, and this thread, but still no luck:

My platform: Ubuntu 8.10

Kernel: Custom Kernel 2.6.27.10 (but used to work fine with moblock)

Firewall Settings : NONE (ufw is not loaded)

Moblock Version:
moblock_0.9~rc2-21+intrepid_i386
moblock-control_1.1-1+intrepid_i386

My /etc/defaults/moblock settings are as follows:
(My LAN ip is 192.168.0.x)

WHITE_TCP_OUT="80 443 1863 22"
WHITE_TCP_IN="22"
WHITE_IP_IN="192.168.0.0/24"
WHITE_IP_OUT="192.168.0.0/24"

My /etc/moblock/allow.p2p is as follows:

192.168.0.1-192.168.0.255

My p2p applications are running properly as I can see usual upload/download status, but my moblock doesn't seem to follow the rules given in the /etc/defaults/moblock.

If I ping www.google.com, it returns: unknown host www.google.com, it only responses after the moblock is turned off

I've even disabled *ALL the lists* written in the /etc/moblock/blocklists.list, and did a moblock-control update && moblock-control restart, still the same, all my internet traffic are still blocked.

sudo moblock-control test

Trying to ping 4.2.144.95 from /etc/moblock/guarding.p2p ...
* MoBlock marked the IP to be blocked and the IP did not answer. Test succeeded.

tail -f /var/log/moblock.log shows that moblock is still doing it's job, ie. :

Fri Jan 9 11:41:24| IN: Beijing Teletron Telecom Engineering Co., Ltd.,hits: 12,SRC: 124.207.144.194
Fri Jan 9 11:41:24| IN: China Digital Kingdom Technology Co.,Ltd,hits: 9,SRC: 60.247.1.87
Fri Jan 9 11:41:24| OUT: TELEFONICA DE ESPANA,hits: 12,DST: 88.5.247.177

However, /var/log/moblock-control.log seems to have some errors:

CST Begin: moblock-control restart
Deleting iptables ...iptables v1.4.0: Couldn't load target `moblock_in':/lib/iptables/libipt_moblock_in.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.0: Couldn't load target `moblock_out':/lib/iptables/libipt_moblock_out.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.0: Couldn't load target `moblock_fw':/lib/iptables/libipt_moblock_fw.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
[fail]
* There occured some errors during the deletion of the iptables rules.
* The most common reason for this is that they did not exist, because MoBlock
* was not running. In this case you don't have to worry.
* But if MoBlock was running there is some problem. Most probably you have
* installed another firewall application that did delete the iptables rules.
* A "moblock-control restart" will then fix the situation.
Executing /etc/moblock/iptables-custom-remove.sh ... [ OK ]
Stopping MoBlock ... [ OK ]
Inserting iptables ... [ OK ]
Executing /etc/moblock/iptables-custom-insert.sh ... [ OK ]
Starting MoBlock ... [ OK ]

Can anyone please help me?

Thanks!
---

SOLVED --- PUT MY DNS SERVER'S IP INTO /etc/moblock/allow.p2p AND IT STARTS TO WORK!

Perhaps the recent blocklist update from tbg.iblocklist.com have included my DNS IP for some reason....

jre

January 9th, 2009, 02:03 PM

I just released moblock-control 1.2.

New handling of blocklists:

php redirects are supported now. This allows to use the lists from iblocklist.com. All lists are downloaded from there per default now.
Since moblock-control 1.1 the default blocklists are by "The Blocklist Group" (tbg.iblocklist.com) instead of Bluetack (bluetack.co.uk).
The single blocklists are saved in new places now (but still under /var/spool/moblock/.
The master blocklist (e.g. guarding.p2p) is now saved in /var/lib/moblock/ instead of /etc/moblock/.
Several changes to make sure that the master blocklist exists and reflects the configuration. All changes are always applied on "start" now.
The (Debian) installation only requires the blocklists (and therefore network access) to be available, if the automatic start (init) is configured.

Per default allow.p2p is not used for forwarded traffic.
Dropped support for Ubuntu Feisty, as this is no more supported by Ubuntu since October 19th, 2008.

Find a detailed list of all changes in the changelog (http://moblock-deb.svn.sourceforge.net/viewvc/moblock-deb/moblock-control/moblock-control/debian/changelog) .

Feedback is very welcome!

Have fun!
jre

@feistybird: Glad to hear you solved it on your own. BTW, this was an excellent report giving much information! Don't worry about the errors in /var/log/moblock-control.log, they just result from trying to delete already deleted iptables rules.

darkcrawler

January 9th, 2009, 08:18 PM

Hi
I upgraded to moblock-control 1.2, from the first test it seems to work good on my intrpid, specially i found very useful the php redirect support!
For the moment there's only one preoblem for me:
Using moblquer, instead of "currently blocking xxx IP ranges" i have "currently blocking an unknown number of IP ranges".. I tried even lists update, turning off/on mobloquer but nothig changes.. Any suggestions?
Thanks

jre

January 10th, 2009, 08:27 AM

Thanks for the feedback.

For the moment there's only one preoblem for me:
Using moblquer, instead of "currently blocking xxx IP ranges" i have "currently blocking an unknown number of IP ranges".. I tried even lists update, turning off/on mobloquer but nothig changes.. Any suggestions?

I hadn't noticed it, but this happens here, too. I don't know why. AFAIK mobloquer gets this number from moblock.log, which is produced by the moblock daemon, which is part of the moblock package and not of moblock-control. So there should not be any regressions here. But obviously there is a problem.

Currently I am working on a new moblock version with some patches that I received, which would break mobloquer - but I doubt that my experiments sneaked to your machine.

Just to be sure, what's the output of
dpkg -l moblock mobloquer

darkcrawler

January 10th, 2009, 09:19 AM

Here's the output;
xxx@xxx-desktop:~$ dpkg -l moblock mobloquer
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Nome Versione Descrizione
+++-==============-==============-============================================
ii moblock 0.9~rc2-21+int An IP blocker for Linux
ii mobloquer 0.5-2+intrepid GUI for MoBlock, an IP blocker for Linux
xxx@xxx-desktop:~$

I trust you that the number of blocked IPs is produced by moblock-daemon, infact it's strange
that with the previous version of moblock-control there was no problem about the number of blockd IPs in mobloquer..

jre

January 10th, 2009, 09:32 AM

Until I find the error you can still check /var/log/moblock.log - this is what really matters.
Here's mine:
Sat Jan 10 14:27:36| * Ranges loaded: 448182
Sat Jan 10 14:27:36| * Merged ranges: 6695
Sat Jan 10 14:27:36| * Skipped useless ranges: 2770
Sat Jan 10 14:27:36| NFQUEUE: binding to queue '92'

darkcrawler

January 10th, 2009, 09:42 AM

jre

January 10th, 2009, 10:45 AM

Just search the /var/log/moblock.log. These lines will appear after starting/reloading MoBlock (after quite a bunch of "Skipping ..." lines) and before the actually blocked IPs.
Follow this file live with
tail -f /var/log/moblock.log. You can stop watching it by pressing the keys "control" + "c".

Or just open it (statically) in an editor, or with "less /var/log/moblock.log"

lovinglinux

January 10th, 2009, 02:12 PM

I also have this issue with "currently blocking an unknown number of IP ranges" in mobloquer. But this is not exactly an issue for me because I monitor moblock's activity in the terminal and everything is fine there.

jre

January 11th, 2009, 01:47 PM

You can workaround the "currently blocking an unknown number of IP ranges" in mobloquer by disabling the timestamping in MoBlock's logfile. Set in /etc/default/moblock:
LOG_TIMESTAMP="0"

The bug resulted, because I changed moblock-control, so that the "timestamp" option is the first option that the moblock daemon is started with. Therefore the timestamp is now also shown in the Ranges line in /var/log/moblock.log. Unfortunately mobloquer can't cope with this. I'll try to fix mobloquer and release a new version.

BTW: I'm going to package the current svn development code of mobloquer, instead of the last stable release 0.5. Further I'll try to fix some issues, however I'm no programmer and can't continue the development. So mobloquer still lacks an active developer, since the current had to step down because of real life time restrictions. If anyone is interested, or has some patches, just contact me.

darkcrawler

January 11th, 2009, 06:37 PM

Very good, i tried to disable the timestamping and now mobloquer shows the number blocked IP ranges!

However i checked /var/log/moblock.log before changing the timestamping and everything was fine.

ATM with this little issue solved i can say that the new moblock-control version works good for me.

Thanks!

iamnotthemessiah

January 20th, 2009, 06:05 PM

sorry for the stupid question but what is the advantage of the tbg.iblocklist.com blocklists? whats the difference?

jre

January 21st, 2009, 06:25 PM

sorry for the stupid question but what is the advantage of the tbg.iblocklist.com blocklists? whats the difference?

I changed from bluetack to TBG, because most of the list maintainers went from bluetack and founded TBG. So I guess its better maintained, but I have no objective reasons for this. Everybody feel free to discuss.
See http://forums.phoenixlabs.org/showthread.php?t=17291

Independent of this I now use the iblocklist.com links. iblocklist mirrors both, TBG and Bluetack lists.

Also have a look at /usr/share/doc/moblock-control/README.blocklists.

iamnotthemessiah

January 22nd, 2009, 12:55 PM

jre, thanks for the reply.

i have a couple of more questions
one is bothering me a bit in the past i had to add nrk (norwegian broadcaster) to the whitelist cos i wanted to watch web streams. without the ips whitelisted it would not work. now today i installed the latest moblock and for the first time tried mobloquer and nothing in hte whitelist and when i try to run the stream ( mms://straumV.nrk.no/nrk_tv_webvid03_h - i dont think this stream will work outside norweay) i get an entry saying its been blocked in the mobloquer log tab, yet the stream loads in vlc with no problems. how could that be? the only explanation i can think of is that it after the initial attempt being blocked it reverts to using http ports or something

secondly. is the search engine blocklist important? i had to remove it cos it blocks both msn, gtalk and icq, sure i could add each individual ip but it seems icq connects to a different ip each time in a huge range

thirdly i guess ur not the mobloquer maintainer but the obscured listnames in the blocklists tab is a bit annoying, it was hard to identify the search engine one so i could remove it

also im wondering, mobloquer says 319299 blocked ranges while 'tail -f --lines=100 /var/log/moblock.log' says 449026

jre

January 22nd, 2009, 02:03 PM

one is bothering me a bit in the past i had to add nrk (norwegian broadcaster) to the whitelist cos i wanted to watch web streams. without the ips whitelisted it would not work. now today i installed the latest moblock and for the first time tried mobloquer and nothing in hte whitelist and when i try to run the stream ( mms://straumV.nrk.no/nrk_tv_webvid03_h - i dont think this stream will work outside norweay) i get an entry saying its been blocked in the mobloquer log tab, yet the stream loads in vlc with no problems. how could that be? the only explanation i can think of is that it after the initial attempt being blocked it reverts to using http ports or something
It might be a whitelisted port or an alternative IP which is not blocked. To be sure you might use "wireshark" to inspect your packets.

secondly. is the search engine blocklist important? i had to remove it cos it blocks both msn, gtalk and icq, sure i could add each individual ip but it seems icq connects to a different ip each time in a huge range
The current default setting might be too paranoid for some people, and indeed I'm thinking of taking a lower default setup. This would include removing the Search Engines list.
But important is what you want. I can only advise to read /usr/share/doc/moblock-control/README.blocklists.gz.

thirdly i guess ur not the mobloquer maintainer but the obscured listnames in the blocklists tab is a bit annoying, it was hard to identify the search engine one so i could remove it
I'm the maintainer of the Debian packages, and upstream is no more :-/
C++ coders are welcome to help.
I intend to make some minor changes to mobloquer, but I doubt that I can change the obscured list names. They are a result of the changes I made for moblock-control (iblocklist.com php URLs). I understand that this is uncomfortable, but I want to stay with the current URLs.

also im wondering, mobloquer says 319299 blocked ranges while 'tail -f --lines=100 /var/log/moblock.log' says 449026
hmm, don't know - here they are exactly the same. And AFAIK mobloquer simply reads that number from moblock.log. Please check again. I guess the number you saw in moblock.log was outdated. To make sure restart moblock-control and mobloquer and check the logfile beginning with the last line.

astarmathsandphysics

January 28th, 2009, 03:06 AM

Quoting https://help.ubuntu.com/community/MoBlock#I%20tried%20to%20install%20MoBlock%20but%2 0I%27m%20stuck%20on%20a%20screen%20with%20a%20Mobl ock%20warning

I tried to install MoBlock but I'm stuck on a screen with a Moblock warning

This is a so called "debconf" question. Read the text and confirm by pressing "OK". If your debconf interface doesn't support your mouse, then you have to use your keyboard: hit the "TAB" key until "OK" is highlighted and then press "RETURN".

@Just_a_man: I'm not common with firestarter. but if someone has a solution I'd be glad to spread the word :-)
Both ways that you describe would be nice. I'd prefer the one with an automatic "moblock-control restart"

Where are my logfiles?

astarmathsandphysics

January 28th, 2009, 03:09 AM

I think this is my moblock logfile

2009-01-27 07:35:36 AM GMT Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gz * . No update available.
Updating bogon.gz ...done.
Updating dshield.gz ...done.
Updating fornonlancomputers.gz ...done.
Updating hijacked.gz ...done.
Updating iana-multicast.gz ...done.
Updating iana-private.gz ...done.
Updating iana-reserved.gz ...done.
Updating level1.gz ...done.
Updating level2.gz ...done.
Updating Microsoft.gz ...done.
Updating proxy.gz ...done.
Updating templist.gz * . No update available.
* Blocklists updated.
Building blocklist ...done.
Installing blocklist to /etc/moblock/guarding.p2p ...done.
* MoBlock is not running, doing nothing.
2009-01-27 07:37:01 AM GMT End: moblock-control update

jre

January 28th, 2009, 10:13 AM

MoBlock logfile: /var/log/moblock.log
moblock-control lockfile: /var/log/moblock-control.log

And please have a look at my signature: Post logfiles in CODE tags, always!

astarmathsandphysics

February 1st, 2009, 05:29 PM

2009-01-20 08:53:35 GMT Begin: moblock-control update
Updating blocklists ...
Updating ads-trackers-and-bad-pr0n.gz * . No update available.
Updating bogon.gz
[74G[ OK ]
Updating dshield.gz
[74G[ OK ]
Updating fornonlancomputers.gz
[74G[ OK ]
Updating hijacked.gz
[74G[ OK ]
Updating iana-multicast.gz
[74G[ OK ]
Updating iana-private.gz
[74G[ OK ]
Updating iana-reserved.gz
[74G[ OK ]
Updating level1.gz * . No update available.
Updating level2.gz
[74G[ OK ]
Updating Microsoft.gz
[74G[ OK ]
Updating proxy.gz * . No update available.
Updating templist.gz * . No update available.
* Blocklists updated.
Building blocklist
[74G[ OK ]
Installing blocklist to /etc/moblock/guarding.p2p
[74G[ OK ]
* MoBlock is not running, doing nothing.
2009-01-20 08:54:25 GMT End: moblock-control update

Like this?
There are no mobloack.log files

The above is from the latest moblock.control.log file

jre

February 2nd, 2009, 01:03 PM

Like this?
Yes.

There are no mobloack.log files

If moblock was never running there will be no logfile. Have you disabled the automatic start during the installation?
Do a "sudo moblock-control start" and you will have a moblock.log.

Super Jamie

February 2nd, 2009, 05:13 PM

I haven't had any luck with MoBlock. It's a pain getting local network access working, and the control program keeps crashing. Back to ufw for me.

astarmathsandphysics

February 3rd, 2009, 10:08 AM

Yes.

If moblock was never running there will be no logfile. Have you disabled the automatic start during the installation?
Do a "sudo moblock-control start" and you will have a moblock.log.

ok done. here is the file.

Skipping useless range: scams pannationalbank.com
Skipping useless range: adbureau.net ads
Skipping useless range: eqchmdvip1.doubleclick.net ads
Skipping useless range: doubleclick.com ads
Skipping useless range: ads
Skipping useless range: www-focusin.targetnet.com
Skipping useless range: targetnet.com(Mamma.com)
Skipping useless range: bluerocketonline.com[OptinRealBig]
Skipping useless range: allchickswithdicks.com[OptinRealBig]
Skipping useless range: auctionwhiz.com/bashapop.com[bashapop popup killer
Skipping useless range: AUCTIONSNAP.com[OptinRealBig]
Skipping useless range: saverealbigdeals.com
Skipping useless range: JAYSWEBSERVICE.COM
Skipping useless range: CPAEMPIRE.COM[OptinRealBig]
Skipping useless range: ss01.net
Skipping useless range: cash4creatives.com[redirects to hugermelons.com]
Skipping useless range: network.realmedia.com ads
Skipping useless range: DOUBLECLICK-AU[ad.au.doubleclick.net]
Skipping useless range: ads
Skipping useless range: extreme-dm.com[eXTReMe digital NL]
Skipping useless range: extreme-dm.com ads
Skipping useless range: w0.extreme-dm.comATBP ATBP
Skipping useless range: tradedoubler.com ads
Skipping useless range: [DShield top10] Unknown
Skipping useless range: [DShield top10] Unknown
Merged range 'IANA Reserved for private use FNLC', with range 'IANA Reserved for private use FNLC'
Skipping useless range: Hijacked IP Block(SH)
Skipping useless range: Hijacked IP Block(SH)
Skipping useless range: Hijacked IP Block(SH)
Skipping useless range: IANA - Private Use [RFC1918]
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Skipping useless range: IANA Reserved - Multicast
Duplicated range ( IANA Reserved - Future use )
Skipping useless range: s0.mediasentry.bbnplanet.net
Skipping useless range: ARGONET INC
Skipping useless range: DOC-INTERNATIONAL TRADE ADMIN
Skipping useless range: ACS-BUSINESS PROCESS SOLUTIONS
Skipping useless range: COMPUTER SCIENCES CORP
Skipping useless range: INSTITUTE FOR DEFENSE ANALYSES
Skipping useless range: THE HUNT LAW GROUP
Skipping useless range: FMC CORPORATION
Skipping useless range: OFFICE OF NAVAL RESEARCH
Skipping useless range: ACS-IR
Skipping useless range: AVAYA
Skipping useless range: EDS
Skipping useless range: CDG COMMUNICATIONS
Skipping useless range: GLASPY GLASPY LAW OFFICES
Skipping useless range: IBM
Skipping useless range: IPSOS-NPD
Skipping useless range: LOCKHEED MARTIN CORPORATION
Skipping useless range: THE BOEING COMPANY
Skipping useless range: SAIC
Skipping useless range: GEOGRAPHIC DATA TECHNOLOGY
Skipping useless range: PLUNKETT COONEY LAW OFFICES
Skipping useless range: DEPARTMENT OF ENERGY
Skipping useless range: Blizzard Entertainment
Skipping useless range: WOW Technologies
Skipping useless range: ACS-IR
Skipping useless range: GENERAL ELECTRIC COMPANY
Skipping useless range: BOOZ ALLEN HAMILTON
Skipping useless range: Lafayette-City Hall
Skipping useless range: ROPERASW, LLC
Skipping useless range: APPLE COMPUTER
Skipping useless range: OSSI
Skipping useless range: MINITAB INC
Skipping useless range: THE LAW OFFICES OF TYLER PEERY
Skipping useless range: Pareto Marketing
Skipping useless range: FBI
Skipping useless range: 911 Center
Skipping useless range: Touchstone Inc
Skipping useless range: City of LaHabra
Skipping useless range: Kinsella LLP Law Offices
Skipping useless range: Sony Pictures
Skipping useless range: Wells Fargo
Skipping useless range: Bechtel National
Skipping useless range: Time Warner, Mark Daoust
Skipping useless range: Securitas
Skipping useless range: Northrup Gruman
Skipping useless range: Time Warner Washington Courthouse HE
Skipping useless range: Time Warner Chillicothe HE
Skipping useless range: Spotsylvania Co Sheriffs Dept
Skipping useless range: DHS--FLETC
Skipping useless range: City of Pico Riveria
Skipping useless range: Silverman Law Offices
Skipping useless range: County of San Bernadino
Skipping useless range: Military Communications Center
Skipping useless range: County of San Bernadino
Skipping useless range: International Speedway
Skipping useless range: Securitas Security Service USA
Skipping useless range: Time Warner Cable
Skipping useless range: Unknown bittorrent tracker
Skipping useless range: always.afraid.org
Skipping useless range: Cuyahoga County Information Services center
Skipping useless range: Willowick City Hall
Skipping useless range: Adlink INC
Skipping useless range: mail.pivotalpost.com
Skipping useless range: Lava Entertainment
Skipping useless range: Independent Records Inc
Skipping useless range: Independent Records Inc
Skipping useless range: Independent Records inc
Skipping useless range: County of Adams
Skipping useless range: Netsecurity
Skipping useless range: Northrup Grumman
Skipping useless range: Northrop Grumman
Skipping useless range: Struthers City Hall
Skipping useless range: Lykens Police Department
Skipping useless range: Time Warner National Bank
Skipping useless range: Kaye Scholer
Skipping useless range: DHS-FLETC
Skipping useless range: Wells Fargo
Skipping useless range: VT Dept. of Public Safety
Skipping useless range: WCAX-TV
Skipping useless range: Warr City Sheriff
Skipping useless range: State Of Vermont
Skipping useless range: Bay County
Skipping useless range: Entertainment Publications Operating Company, Inc
Skipping useless range: Time Warner Liberty HE
Skipping useless range: Time Warner Marion HE
Skipping useless range: Time Warner Media Sales
Skipping useless range: Time Warner
Skipping useless range: Time Warner
Skipping useless range: Time Warner
Skipping useless range: Time Warner Media Services
Skipping useless range: Test Central
Skipping useless range: ESPN Radio
Skipping useless range: Congressman Butch Otter
Skipping useless range: Howard Brief Law Office
Skipping useless range: Marion County Admin Building
Skipping useless range: Marion County Admin Building
Skipping useless range: Dept of Public Safety Homeland Security
Skipping useless range: DDoS/ap2p
Skipping useless range: Novell da Brasil Software Ltda
Skipping useless range: Apple Computer
Skipping useless range: IBM Business Recovery Service
Skipping useless range: IBM Schaumburg USF
Skipping useless range: IBM
Skipping useless range: IBM
Skipping useless range: IBM Schaumburg USF
Skipping useless range: IBM
Skipping useless range: IBM
Skipping useless range: IBM Schaumburg USF
Skipping useless range: IBM Schaumburg USF
Skipping useless range: IBM Schaumburg USF
Skipping useless range: Best Best & Krieger LLP
Skipping useless range: HELLER EHRMAN
Skipping useless range: New York Software Educational Foundation (NYSEF)
Skipping useless range: Blackboard, Inc
Skipping useless range: BAKER & MC KENZIE
Skipping useless range: Fitzpatrick Cella Harper & Scinto
Skipping useless range: Meta Interfaces, LLC
Skipping useless range: Australian Consulate General
Skipping useless range: Common Wealth Partners, LLC
Skipping useless range: Navigant Consulting, Inc
Skipping useless range: USPS OIG
Skipping useless range: Macrovision Corporation
Skipping useless range: Munsch Hardt Kopf Harr
Skipping useless range: LITTLER MENDELSON
Skipping useless range: Fowler Rodriguez Chalos
Skipping useless range: Terralliance - Dallas
Skipping useless range: Agency.com
Skipping useless range: City Of Pasadena
Skipping useless range: Vidsys
Skipping useless range: Winston & Strawn DC
Skipping useless range: The Medleh Group
Skipping useless range: 1636601 ONTARIO INC O/A RUSSIAN TELEVISION NETWORK OF CANADA
Skipping useless range: Bancroft Associates
Skipping useless range: PILLSBURY Winthrop Shaw Pittman LLP
Skipping useless range: State of Delaware
Skipping useless range: Summation Legal Technologies
Skipping useless range: Westwood One / METRO NETWORKS INC
Skipping useless range: DRS Technologies
Skipping useless range: National Mediation Board
Skipping useless range: Denver Center for Performing Arts
Skipping useless range: National Mediation Board - Chicago Site
Skipping useless range: AeA (American Electronics Association)
Skipping useless range: NIIT
Skipping useless range: Diligence Inc
Skipping useless range: Georgia Environmental Facilities Authority
Skipping useless range: JENNER & BLOCK
Skipping useless range: HILL, FARRER & BURRILL LLP
Skipping useless range: Federal Reserve Bank of Chicago
Skipping useless range: Blackwell Sanders/ProTel Consulting
Skipping useless range: Middleberg, Riddle & Gianna (MRG Document Techcnologies)
Skipping useless range: Much Shellist Freed & Dannenberg
Skipping useless range: (SAIC) Science Applications International Corporation
Skipping useless range: CITY OF TOLEDO
Skipping useless range: Corboy & Demetrio P.C
Skipping useless range: Sugar, Friedberg, & Fensenthal LLP
Skipping useless range: MULTIMAX INC - HQ
Skipping useless range: Waterdog Records
Skipping useless range: USPS OIG
Skipping useless range: City of Harvey
Skipping useless range: Cyberbroadcasting
Skipping useless range: Kutak Rock LLP
Skipping useless range: Big Star TV, LLC
Skipping useless range: Dodloo, Inc
Skipping useless range: Hays, McConn, Rice, & Pickering
Skipping useless range: Dykema Gossett
Skipping useless range: CAPGEMINI AMERICA OUTSOURC
Skipping useless range: City of Kankakee, IL
Skipping useless range: American Media Services
Skipping useless range: Burson-Marsteller
Skipping useless range: COGNITIVE ARTS / NIIT USA, Inc
Skipping useless range: BRYAN CAVE STRATEGIES
Skipping useless range: Schwartz, Cooper, Greenberger & Kraus
Skipping useless range: Halcyon Worlds
Skipping useless range: OK! Magazine
Skipping useless range: Winston & Strawn LLP
Skipping useless range: PALMER, BIEZUP & HENDERSON LLP
Skipping useless range: Butler, Rubin, Saltarelli & Boyd
Skipping useless range: Macrovision Corporation
Skipping useless range: McKenna, Long, Aldridge LLP
Skipping useless range: Opineum Marketing LLC
Skipping useless range: The Medleh Group - NY
Skipping useless range: Rocky Mountain Law Enforcement FCU
Skipping useless range: Schirott & Luetkehans
Skipping useless range: Heenan Blaikie Management Ltd
Skipping useless range: HASSARD & BONNINGTON
Skipping useless range: UNITED STATIONS RADIO NETWORKS
Skipping useless range: Refresh Software
Skipping useless range: Milberg, Weiss, Bershad & Schulman
Skipping useless range: Viacom Inc
Skipping useless range: MEEHAN BOYLE BLACK & FITZGERALD
Skipping useless range: Macrovision Corporation
Skipping useless range: Swiss Broadcasting Corp
Skipping useless range: WISCNET
Skipping useless range: Coleman, Talley, Newbern, Kurrie, Preston & Holland, LLP
Skipping useless range: Chamberlain, Hrdlicka, White, Williams & Martin
Skipping useless range: Coudert Brothers LLP
Skipping useless range: Factor 5, L.L.C
Skipping useless range: City of White Plains
Skipping useless range: Blaney McMurtry LLP
Skipping useless range: Panscient Data Services Pty Ltd
Skipping useless range: Thomson Corporation
Skipping useless range: Meta Interfaces, LLC
Skipping useless range: HENNIGAN Bennett & Dorman
Skipping useless range: ESP Group, LLC
Skipping useless range: Live365.com / Live365
Skipping useless range: Viacom Inc
Skipping useless range: State of Oregon
Skipping useless range: Martha Stewart Living Omnimedia, LLC
Skipping useless range: POKEMON USA INC
Skipping useless range: WILLIG WILLIAMS & DAVIDSON
Skipping useless range: DAVIS & GILBERT
Skipping useless range: Morrison & Foerster LLP Headquarters
Skipping useless range: Williams, Montgomery, & John LTD
Skipping useless range: HYMAN PHELPS & MC NAMARA
Skipping useless range: Ambiron, LLC
Skipping useless range: Collabnet, Inc
Skipping useless range: UN High Commissioner for Refugees
Skipping useless range: Starwin Media
Skipping useless range: nMatrix
Skipping useless range: HLP Associates, Inc
Skipping useless range: Access Systems Inc. / OASAS Education Center
Skipping useless range: Tritech Software Systems*
Skipping useless range: The Actors Fund of America
Skipping useless range: Debevoise & Plimpton LLP
Skipping useless range: Hughes & Luce. LLP
Skipping useless range: Lovells
Skipping useless range: Telarix
Skipping useless range: Lincoln Group
Skipping useless range: Richards, Watson & Gershon
Skipping useless range: Chamberlain, Hrdlicka, White, Williams & Martin
Skipping useless range: Vedder Price, Kaufman & Kammholz
Skipping useless range: LEYDIG VOIT & MAYER
Skipping useless range: Bureau Van Dijk Electronic Publishing, Inc
Skipping useless range: Blackwell Sanders/ProTel Consulting
Skipping useless range: Wolf Popper LLP
Skipping useless range: Nokia Research
Skipping useless range: Stardock Corporation
Skipping useless range: Access IT - Hosting Services
Skipping useless range: ESP Group, LLC
Skipping useless range: Cap Gemini Dallas
Skipping useless range: Astral Media Radio G.P
Skipping useless range: BARACK FERRAZZANO KIRSCHBAUM
Skipping useless range: Moozatech
Skipping useless range: Lahive & Cockfield, LLP
Skipping useless range: Broadcom Corporation (CA)
Skipping useless range: McDermott Will & Emery
Skipping useless range: USPS OIG
Skipping useless range: E! Entertainment
Skipping useless range: Guba LLC
Skipping useless range: Meta Interfaces, LLC
Skipping useless range: Net One Group
Skipping useless range: Evil Twin Studios
Skipping useless range: USPS OIG
Skipping useless range: USPS OIG
Skipping useless range: InfoRelay
Skipping useless range: USPS OIG
Skipping useless range: Project Leadership Associates
Skipping useless range: CYVEILLANCE
Skipping useless range: Guba LLC
Skipping useless range: Synchris
Skipping useless range: Major League Baseball Advance Media
Skipping useless range: KING COUNTY BAR ASSOC
Skipping useless range: Frictionless Commerce
Skipping useless range: Beveridge & Diamond
Skipping useless range: Blackwell Sanders/ProTel Consulting
Skipping useless range: GPVOD
Skipping useless range: Dreier LLP
Skipping useless range: COATS, ROSE, YALE, RYMAN & LEE
Skipping useless range: E! Entertainment
Skipping useless range: USPS OIG
Skipping useless range: Illinois State Chamber of Commerce
Skipping useless range: Wolf Haldenstein
Skipping useless range: Science Applications International Corporation (SAIC)
Skipping useless range: Gemplus Corporation
Skipping useless range: Morrison & Foerster LLP Headquarters
Skipping useless range: Cornerstone Research INC
Skipping useless range: Sidley Austin LLP
Skipping useless range: LITIGATION SOLUTION INC
Skipping useless range: Federal Reserve Bank of Chicago
Skipping useless range: ZSA Legal Recruitment
Skipping useless range: USPS OIG
Skipping useless range: New Jersey Performing Arts
Skipping useless range: Your OneStop Network, Inc
Skipping useless range: Arnstein & Lehr, LLP
Skipping useless range: Shumaker Steckbauer Weinhart, LLP
Skipping useless range: Ungaretti & Harris
Skipping useless range: Minden Gross LLP
Skipping useless range: Dream Tank LLC
Skipping useless range: Ziff Davis Media Inc
Skipping useless range: Labaton Sucharow & Rudoff LLP
Skipping useless range: CARROLL BURDICK & MC DONOUGHks
Skipping useless range: CARROLL BURDICK & MC DONOUGH
Skipping useless range: USPS OIG
Skipping useless range: USPS OIG
Skipping useless range: Cinemavault
Skipping useless range: SafeNet inc
Skipping useless range: ORRICK HERRINGTON & SUTCLIFFE
Skipping useless range: Terralliance - Denver
Skipping useless range: USPS OIG
Skipping useless range: STG, Inc
Skipping useless range: Borden Ladner Gervais LLP
Skipping useless range: InfoRelay
Skipping useless range: USPS OIG
Skipping useless range: MORRISON & FORESTER - Main
Skipping useless range: Pond North LLP
Skipping useless range: Pond North LLP
Skipping useless range: Steptoe & Johnson LLP
Skipping useless range: Davis Polk & Wardwell
Skipping useless range: HOWREY LLP
Skipping useless range: DEHAY & ELLISTON
Skipping useless range: Berger / Schatz
Skipping useless range: BOSTON PROPERTIES
Skipping useless range: BitTorrent, Inc
Skipping useless range: Alston & Bird, LLP
Skipping useless range: Hyman,Lippitt, P.C
Skipping useless range: Mercury Interactive
Skipping useless range: USPS OIG
Skipping useless range: IBB / International Broadcasting Bureau
Skipping useless range: Revive Systems
Skipping useless range: 247 Discovere
Skipping useless range: USPS OIG
Skipping useless range: Houghton Mifflin Company
Skipping useless range: USPS OIG
Skipping useless range: PILLSBURY Winthrop Shaw Pittman LLP
Skipping useless range: Jorge Scientific Corp
Skipping useless range: JORGE SCIENTIFIC CORPORATION
Skipping useless range: USPS OIG
Skipping useless range: DeNovo Legal
Skipping useless range: Knoble Yoshida & Dunleavy, LLC
Skipping useless range: WINSTEAD SECHREST & MINICK
Skipping useless range: Cox, Hodgman, & Giarmarco, P.C
Skipping useless range: Cook Sound & Producion (Sound Works)
Skipping useless range: Nisen & Elliott
Skipping useless range: SRA Arlington
Skipping useless range: USPS OIG
Skipping useless range: Knowledge Adventure
Skipping useless range: OPEN ROAD PRODUCTIONS
Skipping useless range: Magna Entertainment
Skipping useless range: The Medleh Group - Houston
Skipping useless range: AEG Live!
Skipping useless range: Brown Raysman Millstein Felder & Steiner
Skipping useless range: Auto FX Software
Skipping useless range: WINSTEAD SECHREST & MINICK
Skipping useless range: BENNETT BRICKLIN & SALTZBURG LLP
Skipping useless range: PILLSBURY Winthrop Shaw Pittman LLP
Skipping useless range: Maddin, Hauser, Wartell, Roth & Heller, P.C
Skipping useless range: City of Gainesville dba GRUCom
Skipping useless range: Williams & Connolly LLP
Skipping useless range: Fragomen, Delrey, Bersen & Loewy, LLP
Skipping useless range: filmcore
Skipping useless range: Hemenway & Barnes
Skipping useless range: Greater Boston Chamber of Commerce
Skipping useless range: Secured Servers
Skipping useless range: Secured Servers
Skipping useless range: Pacific Racing Association / Magna Entertainment
Skipping useless range: Stardock Corporation
Skipping useless range: BBDO Canada
Skipping useless range: Bulkley Richardson & Gelinas, LLP
Skipping useless range: BRACEWELL & Patterson, L.L.P
Skipping useless range: VERANCE
Skipping useless range: Banyan Productions
Skipping useless range: Powell Goldstein (HQ)
Skipping useless range: WHITE & WILLIAMS LLP
Skipping useless range: BRINKS HOFER GILSON & LIONE
Skipping useless range: Mintz Levin Cohn Ferris Glovsky & Pompeo
Skipping useless range: Nexon/NX Games
Skipping useless range: USPS OIG
Skipping useless range: USPS OIG
Skipping useless range: Navisite Inc
Skipping useless range: Department of Energy
Skipping useless range: G4 Media /G4techTV
Skipping useless range: Catalyst Software Solutions
Skipping useless range: DiscoverReady LLC
Skipping useless range: STANISLAW ASHBAUGH LLP
Skipping useless range: Ontario Investment Service, Ministry of Economic Development & Trade
Skipping useless range: G4 Media /G4techTV
Skipping useless range: BCG Attorney Search BOS
Skipping useless range: Eloda inc
Skipping useless range: Fields Howell Athans & McLaughlin, LLP
Skipping useless range: C2 Legal of Illinois
Skipping useless range: The Associated Press
Skipping useless range: Henry, Oddo, Austin, & Fletcher
Skipping useless range: Patton Boggs
Skipping useless range: USPS OIG
Skipping useless range: Creative Thought, Inc
Skipping useless range: Magna Entertainment
Skipping useless range: The News Journal
Skipping useless range: Agency.com
Skipping useless range: SUSMAN GODFREY, LLP
Skipping useless range: Parker Mills & Patel LLP
Skipping useless range: Idea Flood
Skipping useless range: SafeNet inc
Skipping useless range: Parsons Corporation / Parsons
Skipping useless range: Gameline
Skipping useless range: Hunter Keilty Muntz & Beatty
Skipping useless range: Echoworx Corporation
Skipping useless range: Willms & Shier Environmental Lawyers LLP
Skipping useless range: Blaney McMurtry Barristers & Solicitors LLP
Skipping useless range: Information and Privacy Commissioner/Ontario
Skipping useless range: ZSA Legal Recruitment
Skipping useless range: Polish Television USA
Skipping useless range: Mindshare Canada
Skipping useless range: Toronto Board of Trade
Skipping useless range: Mindshare Canada
Skipping useless range: Lippincott Williams & Wilkins
Skipping useless range: State of Delaware
Skipping useless range: Insurance Bureau of Canada
Skipping useless range: Hill and Knowlton Canada
Skipping useless range: Thomson Corporation
Skipping useless range: MaRS
Skipping useless range: Peel District School Board
Merged range 'Performance Systems International-ed2k/ap2p', with range 'PSI FAKES PHOTOBKT Split_B'
Skipping useless range: Live Universe, Inc
Skipping useless range: jvcmusic.co.jp
Skipping useless range: fake emule servers
Skipping useless range: WAYI INTERNATIONAL DIGITAL ENTERTAINMENT CO., LTD
Skipping useless range: GSN, Taiwan Government Service Network
Skipping useless range: THE MATSUMOTO CHAMBER OF COMMERCE & INDUSTRY
Skipping useless range: Yaizu city hall
Skipping useless range: Fujitsu I Network Systems Limited
Skipping useless range: FUJITSU FIP CORPORATION
Skipping useless range: Fujitsu Limited Probank-System Division
Skipping useless range: Sado Television Inc
Skipping useless range: FUJITSU FIP CORPORATION
Skipping useless range: Export,Import and Investment Insurance Department,Minstry of Economy,Trade and
Skipping useless range: FUJITSU FIP CORPORATION
Skipping useless range: CHINANET|Anti-p2p
Skipping useless range: CHINANET|Anti-p2p
Skipping useless range: Longyou Procuratorate
Skipping useless range: Longyou Police Bureau
Skipping useless range: Step 10 Production - Kwun Tong INd Ctr Blk 2
Skipping useless range: Modern Electronics Co - Sun Fung Ind Ctr Blk A
Skipping useless range: Graphic Plus Output And Production Ctr - Ho Lik C
Skipping useless range: Media-Tech Printing And Production Co - Grand Cit
Skipping useless range: F6 Production Co - Shing Yip IND BLDG (Kwun Tong)
Merged range ' Bertelsmann mediaSystems GmbH', with range 'Bertelsmann mediaSystems GmbH'
Skipping useless range: Bertelsmann mediaSystems GmbH
Skipping useless range: Bertelsmann mediaSystems GmbH
Skipping useless range: Tachyon Europe BV
Skipping useless range: TURKHACKTEAM.ORG
Skipping useless range: Sony Nordic A/S
Skipping useless range: Sony Nordic A/S
Skipping useless range: Sony Nordic A/S
Skipping useless range: Sony Nordic A/S
Skipping useless range: Insoft
Skipping useless range: CONS.AGRARIO PROVINCIALE ARL
Skipping useless range: Syntegra Leeds
Skipping useless range: County Durham & Tees Valley Health Authority
Skipping useless range: NHS Counter Fraud Service, Central Unit (London)
Skipping useless range: Morpeth County Hall, Morpeth NE61 2EF
Skipping useless range: Berwick District Office (Social Services)
Skipping useless range: Hexham District Office (Social Services)
Skipping useless range: Alnwick District Office (Social Services)
Skipping useless range: Cramlington District Office (Social Services)
Skipping useless range: Blyth District Office(Social Services)
Skipping useless range: Ashington District Office (Social Services)
Skipping useless range: Prudhoe District Office (Social Services)
Skipping useless range: Newbiggin District Office (Social Services)
Skipping useless range: Bedlington District Office (Social Services)
Skipping useless range: Merlycroft District Office (Social Services)
Skipping useless range: Norfolk County Council linked to NHSnet
Skipping useless range: BT Syntegra - Leeds
Skipping useless range: South West London PHI - Wandsworth Borough Counci
Skipping useless range: Philips Medical Systems
Skipping useless range: Ministry Of Education
Skipping useless range: Ministry Of Education
Skipping useless range: SONY FRANCE
Skipping useless range: EDS EXPLOITATION SNC
Skipping useless range: MOTOROLA
Skipping useless range: SKIDATA FRANCE SA
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Merged range ' GI - Customer Interconnexion With RAEI Backbone', with range 'GI - Customer Interconnexion With RAEI Backbone'
Skipping useless range: Lan range for the Commonwealth Secretariat
Skipping useless range: JIC-MUSIC.NL
Skipping useless range: Virgin Wines
Skipping useless range: Wards Solicitors
Merged range 'CBC Cologne Broadcasting Center', with range 'CBC Cologne Broadcasting Center'
Skipping useless range: CBC Cologne Broadcasting Center
Skipping useless range: MAM-LAN
Skipping useless range: ALM-PUBLISHING à Casa
Skipping useless range: ALM-PUBLISHING à Casa
Skipping useless range: SUN MICROSYSTEMS à Casa
Skipping useless range: Production & Exportation fleurs coupés à Casa
Skipping useless range: cyber studio sarl à Casa
Skipping useless range: Societe de l'audio visuel à Casa
Skipping useless range: price waterhouse Maroc
Skipping useless range: General electric international Maroc
Skipping useless range: Tribunal de Commerce de Meknes
Skipping useless range: Chambre de Commerce d\\
Skipping useless range: Tribunal de Commerce d\
Skipping useless range: VIDEORAMA SARL à Casa
Skipping useless range: FTS2001/CDC/NCID
Skipping useless range: Verestar
Skipping useless range: Crowell & Moring
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: PeopleSoft
Skipping useless range: Jungle Interactive M
Skipping useless range: Policia Aguadilla
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: FORENSICS CONSULTING SOLUTIONS
Skipping useless range: Law Firm of Barrett Stetson
Skipping useless range: NATIONAL CENTER FOR VICTIMS OF CRIME
Skipping useless range: BUTZEL LONG
Skipping useless range: Absolute Pitch Studios
Skipping useless range: On Time Technology
Skipping useless range: Lawyers Committee for Civil Rights Under Law
Skipping useless range: Siebel Systems
Skipping useless range: Fox Kids.Com
Skipping useless range: ACS Unclaimed Property
Skipping useless range: Fulbright & Jaworski
Skipping useless range: Pyramid Research
Skipping useless range: Butzel Long, P.C
Skipping useless range: Elron Telesoft
Skipping useless range: LEGAL OPTIONS
Skipping useless range: Law Offices of Brian Hersh
Skipping useless range: Law Office of Linda Lee
Skipping useless range: LAW OFFICES OF TAUS & TAUS
Skipping useless range: MCAFEE
Skipping useless range: Siebel Systems Inc
Skipping useless range: The M Group
Skipping useless range: Law Offices of Russell A Kelm
Skipping useless range: Zero Gravity Technologies
Skipping useless range: Widevine Technologies
Skipping useless range: Lucent Technologies
Skipping useless range: ELRON SOFTWARE
Skipping useless range: Law Office of Joel H. Greenburg
Skipping useless range: Lucent
Skipping useless range: Epoch Sales
Skipping useless range: Lucent Technologies
Skipping useless range: GOVERNOR GRAY DAVIS COMMITTEE
Skipping useless range: law offices of peter gonzales
Skipping useless range: Clifford Chance
Skipping useless range: Law Offices of Susan R Green
Skipping useless range: Video Files Media Group
Skipping useless range: Goldfarb & Lipman
Skipping useless range: NR SOFTWARE
Skipping useless range: Law Office of Mullen & McGourty
Skipping useless range: the grovenor gray-davis commitee
Skipping useless range: Intersoft
Skipping useless range: LEGALKEY TECHNOLOGIES INC
Skipping useless range: Law Office of I. Harrison Levy
Skipping useless range: COMMAND SOFTWARE STAFFING
Skipping useless range: ACS GROUP
Skipping useless range: attorney GREIVANCE COMM
Skipping useless range: LAW OFFICES OF BURTON AND BURTON
Skipping useless range: William E. Artz, P.C
Skipping useless range: Cogent Systems
Skipping useless range: Law Offices of Matthew Web
Skipping useless range: Law Office of Hermes & Ga
Skipping useless range: LAW OFFICE OF DAVID M BEREEKE
Skipping useless range: UNIVERSAL IMAGES
Skipping useless range: Law Offices of Larry Zieger
Skipping useless range: Core Studio
Skipping useless range: FULBRIGHT & JAWORKY
Skipping useless range: SYNTHESIS
Skipping useless range: Judicial Corrections
Skipping useless range: Law Offices of Ana Schvartz
Skipping useless range: ABC Inc
Skipping useless range: AVALON PUBLISHING
Skipping useless range: United Artist Theater
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: Raleigh Studios Manhattan Beach182185
Skipping useless range: Ernst & Young Llp
Skipping useless range: Onesecure
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: MediaDefender
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: Halliburton Systems Inc
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: Electronic Data Systems Corporation (EDS)
Skipping useless range: Electronic Data Systems Corporation (EDS)
Skipping useless range: Websense
Skipping useless range: Marvel King Enterprises Limited
Skipping useless range: Greenberg Traurig
Skipping useless range: Thomas Mamer Haughey
Skipping useless range: Champaign Public Library
Skipping useless range: Max Music & Entertainment
Skipping useless range: Indigo.Multimedia
Skipping useless range: Intersoft Group, Inc
Skipping useless range: NBACORP
Skipping useless range: Intersoft Group, Inc
Skipping useless range: Intersoft Group, Inc
Skipping useless range: Omnicom of America, Inc
Skipping useless range: Signal Command
Skipping useless range: Intersoft Group, Inc
Skipping useless range: Intersoft Group, Inc
Skipping useless range: Omnicom of America, Inc
Skipping useless range: Legal Internet Solutions Inc
Skipping useless range: World Ehtbic Broadcasting, Inc
Skipping useless range: Web Entertainment Group, Inc
Skipping useless range: EDS Systemhouse
Skipping useless range: Siemens Medical Solutions Health Services Corporation
Skipping useless range: Barbara J. Weiser, Attorney at Law, P.C
Skipping useless range: 20th Century Fox #27 (Simpsons)
Skipping useless range: Macrovision
Skipping useless range: Jefferson County Ohio
Skipping useless range: Massive Software
Skipping useless range: MediaDefender
Skipping useless range: VereStar Networks
Skipping useless range: VereStar Networks BRW
Skipping useless range: VereStar Networks BRW
Skipping useless range: Skyweb Technologies Ltd
Skipping useless range: VereStar Networking Consumers
Skipping useless range: Verestar
Skipping useless range: VereStar Networking Consumers
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: fake files
Skipping useless range: Us Army Recruiting GSA
Skipping useless range: Braxton County
Skipping useless range: Public Defender For The 25th Circuit
Skipping useless range: Marion County
Skipping useless range: Keith A Cox Attorney of Law
Skipping useless range: Skeen & Skeen DGN Atty
Skipping useless range: Bayliss Law Offices
Skipping useless range: Blair Law Office
Skipping useless range: City of Huntington
Skipping useless range: Legal Aid of WV
Skipping useless range: Ryan & Ryan Attorneys at
Skipping useless range: City of Chesapeake City Clerk
Skipping useless range: John Law Offices
Skipping useless range: Dinsmore & Shohl LLP / Kay, Casto & Chaney
Skipping useless range: Le Law Offices
Skipping useless range: Martin Marietta Aggregates
Skipping useless range: Jan Dils Attorney At Law
Skipping useless range: Wells Dillon Law Office
Skipping useless range: D Randall Clarke Law Office
Skipping useless range: John Laishley Law Office
Skipping useless range: Law Office Of Kathryn A Cisco-Sturgell
Skipping useless range: Yannerella Law Offices
Skipping useless range: Juno Boston Production Inet & Dial /24 block via Boston
Skipping useless range: BearingPoint
Skipping useless range: BearingPoint
Skipping useless range: Accenture-TMHP
Skipping useless range: Intec Telecom Systems, Inc..256844
Skipping useless range: Movielink
Skipping useless range: Intec Telecom Systems, Inc
Skipping useless range: Movielink
Skipping useless range: pyus.guba.com
Skipping useless range: EDS
Skipping useless range: The Culver Studios
Skipping useless range: Universal Studios SBC064175196136020819 (NET-64-175-196-136-1)
Skipping useless range: Universal Studios SBC064175196144020819 (NET-64-175-196-144-1)
Skipping useless range: Office of Management and Budget
Skipping useless range: Clear Channel Communications IT Services
Skipping useless range: Clear Channel Communications IT Services
Skipping useless range: Clear Channel Communications IT Services
Skipping useless range: Clear Channel Communications IT Services
Skipping useless range: Xamo Entertainment
Skipping useless range: Xamo Entertainment
Skipping useless range: Republican National Committee
Skipping useless range: CDC
Skipping useless range: Capstone Technologies
Skipping useless range: PCF Software Solutions, Inc
Skipping useless range: SSA Consultants
Skipping useless range: Law Offices of Walsh & Bailey
Skipping useless range: Atty Asante & Assoc
Skipping useless range: ACTIVISION
Skipping useless range: ACTIVISION
Skipping useless range: COVENANT TECHNOLOGY
Skipping useless range: City of Greensboro - ABC Board
Skipping useless range: U.S. Chamber of Commerce Insitute for Legal Reform
Skipping useless range: Department of Public Safety - State Police
Skipping useless range: Department of Information Technology
Skipping useless range: cinemanow.com
Skipping useless range: OLM,LLC
Skipping useless range: Capella Films Inc
Skipping useless range: LAW OFFICES OF AMELI, AYVAZI & ASSOICATES
Skipping useless range: STUDIO SOFTWARE
Skipping useless range: Foundry Networks
Skipping useless range: Law Office of Herbert Thaler
Skipping useless range: ARIAMEDIA
Skipping useless range: KELLEY LAW ASSOCIATES
Skipping useless range: Legal Leaders
Skipping useless range: Ladas & Parry
Skipping useless range: Capella Films
Skipping useless range: L.A. Studios
Skipping useless range: LAW OFFICE OF MANUEL GOMEZ
Skipping useless range: GOVERNOR GRAY DAVID COMMITTEE
Skipping useless range: Walt Disney Imagineering
Skipping useless range: ASSOCIATED PRODUCTION MUSIC APM
Skipping useless range: AMERICAN.COUNCIL.ON.GERMANY
Skipping useless range: Attorney David Munson
Skipping useless range: Big Fat Promotions
Skipping useless range: Law Offices of Jason B Rosenthal
Skipping useless range: SOLIX SYSTEMS, INC
Skipping useless range: USAF II, LLC
Skipping useless range: Embassy of India
Skipping useless range: MURPHY & LOMON & ASSOCIATE
Skipping useless range: Cogent Systems
Skipping useless range: VANGUARD.MEDIA
Skipping useless range: IGNITE STUDIO
Skipping useless range: GENERAL SERVICES ADMIN
Skipping useless range: Oddworld Inhabitants, Inc
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: GE POWER SYSTEMS PO 182007122
Skipping useless range: UNITED ARTISTS THEATRE CIRCUIT
Skipping useless range: Macromedia Inc
Skipping useless range: Bush Cheney Re-Election Campaign
Skipping useless range: Bush Cheney Re-Election Campaign
Skipping useless range: DOL Dept AL Trabajo
Skipping useless range: TIBCO SOFTWARE
Skipping useless range: ADP DEALER
Skipping useless range: FTS2001/US Dept of State
Skipping useless range: FTS2001/Dept of State
Skipping useless range: FTS2001/NAVSEA PHD NSWC
Skipping useless range: OPSWARE
Skipping useless range: SCIENCE APPLICATIONS INT
Skipping useless range: ppiltd.com
Skipping useless range: Cox Television
Skipping useless range: Ancient Media
Skipping useless range: Red Realm Productions, Inc
Skipping useless range: NHI Networks - NHICOLO
Merged range 'NHI Customer', with range 'NHI Networks'
Skipping useless range: OLM,LLC
Skipping useless range: BearingPoint IDMS
Skipping useless range: AP2P Scum
Skipping useless range: Eds App
Skipping useless range: Mercury Interactive
Skipping useless range: VereStar Networks BRW
Skipping useless range: VereStar Networks BRW
Skipping useless range: VereStar Networks BRW
Merged range 'ESPN', with range 'Defense Web Technologies'
Merged range 'Sega Gameworks', with range 'Sega Gameworks'
Skipping useless range: Retspan
Skipping useless range: retspan.info3
Skipping useless range: Veritas Consulting
Skipping useless range: MediaDefender
Skipping useless range: Bittorrent FAKES
Skipping useless range: Netsweeper
Skipping useless range: Abacus Computer
Skipping useless range: Netsweeper
Skipping useless range: Salt Lke County
Skipping useless range: Jensen Duffin Carman Dibb And Jackson
Skipping useless range: SLC Chamber of Commerce
Skipping useless range: Utah State Bar
Skipping useless range: Workman, Nydegger & Seeley
Skipping useless range: Business Software Solutions
Skipping useless range: Software Technology Group
Skipping useless range: Business Software Solutions
Skipping useless range: NDS
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: safenet-inc.com
Skipping useless range: www.musicunited.org | RIAA
Skipping useless range: Town of Perth Treasury Office
Skipping useless range: ibm022504
Skipping useless range: gnutella server farm on CBTS
Skipping useless range: California Bar
Skipping useless range: City of Folsom
Skipping useless range: Apple Computer SBC067122195056030613 (NET-67-122-195-56-1)
Skipping useless range: www.mt-hackers.org
Skipping useless range: LAVAN BRIANDGN ATTY
Skipping useless range: Urs Corporation
Skipping useless range: Offline Inc
Skipping useless range: LAFAYETTE-CITY HALL
Skipping useless range: Infraswitch|BayTSP
Skipping useless range: xeex
Skipping useless range: InterCage
Skipping useless range: Teletime Media Inc
Skipping useless range: Hunton And Company
Skipping useless range: Walt Disney Pictures Tv12492653
Skipping useless range: WaltDisneyPicturesTv124938577
Skipping useless range: WaltDisneyPicturesTv12494196
Skipping useless range: NORTHROP GRUM CORP IT-041222005139
Skipping useless range: Mediasentry
Skipping useless range: Mediasentry
Skipping useless range: D.O.D
Skipping useless range: [5307th]rangers
Skipping useless range: global strike force
Skipping useless range: Mediasentry
Skipping useless range: ns1 and ns2.waltham.tower-research.com
Skipping useless range: SONY COMPUTER 2ND FL-050421021222
Skipping useless range: SONY COMPUTER 2ND FL-050421021756
Skipping useless range: SONY COMPUTER 2ND FL-050421022042
Skipping useless range: Possible Macrovision
Skipping useless range: Possible Macrovision
Skipping useless range: SN-MSI
Skipping useless range: datarecoverygroup.com
Skipping useless range: MediaDefender
Skipping useless range: BayTSP
Skipping useless range: mail.projectinvision.com
Skipping useless range: The Entertainment Group
Skipping useless range: 2waytraffic
Skipping useless range: Bullet Sound Studios
Skipping useless range: COMUNE DI COLLEGNO
Skipping useless range: CINEMATOGRAFI PLINIUS
Skipping useless range: COMUNE DI PESCARA
Skipping useless range: STUDIO LEGALE SABELLI
Skipping useless range: COMUNE DI RICCIONE
Skipping useless range: COMUNE DI LECCE
Merged range ' AMMINISTRAZIONEPROVINCIALESALE', with range 'AMMINISTRAZIONEPROVINCIALESALE'
Skipping useless range: AMMINISTRAZIONEPROVINCIALESALE
Skipping useless range: COMUNE DI VENEZIA
Skipping useless range: COMUNE DI SIRACUSA
Skipping useless range: EDSLAN SPA
Skipping useless range: HEWLETT-PACKARD DISTRIBUTED COMPUTING SERVICES SR
Skipping useless range: CINECITTA'STUDIOSSPA
Skipping useless range: CINECITTA.Studiosspa.IT
Skipping useless range: www.zasp.pl
Skipping useless range: www.so.lublin.pl
Skipping useless range: Koebenhavns Produktionsskole
Skipping useless range: Definite Software Ltd
Skipping useless range: Definite Software Ltd
Skipping useless range: Botschaft der Republik Jemen
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Annaberg-Buchholz
Skipping useless range: Messstetten ZAK EinsFuesser1
Skipping useless range: Messstetten Heuberg EinsFuesser1
Skipping useless range: Messstetten VAN Lw EinsFuesser1
Skipping useless range: Messstetten Patriot/Stinger Ein sFuesser1
Skipping useless range: MEssstetten Virtel-Kabine EinsF uesser1
Skipping useless range: Lechfeld JaboG 32
Skipping useless range: Neuburg/D Jagdgeschwader 74
Skipping useless range: FmSkt606
Skipping useless range: Penzing LTG 61
Skipping useless range: Buechel JaboG 33
Skipping useless range: Fliegerorst Noervenich JaboG 31
Skipping useless range: Laupheim MTH 25
Skipping useless range: EADS Ottobrunn
Skipping useless range: IABG Ottobrunn
Skipping useless range: FlaRakG 1\"SH\" Husum
Skipping useless range: General v.Seidel Kaserne ZEK
Skipping useless range: 3./ObjSBtlLw Wittmund
Skipping useless range: Campbell Barracks, Geb. 32
Skipping useless range: Bundeswehr
Skipping useless range: KENNETH-BUSH-SOLICITORS
Skipping useless range: TAKE-2-INTERACTIVE-EUROPE
Skipping useless range: ISTITUTO GEOGRAFICO MILITARE
Skipping useless range: GLOUCESTER-SONY-CENTRE
Skipping useless range: WORCESTER office network
Skipping useless range: GB
Skipping useless range: dentonwildesapte.com
Skipping useless range: Telstra Europe DMZ Services
Skipping useless range: FR-RAEI-DASSAULT-AVIATION-DE-LA-TESTE-LB_INTERNET
Skipping useless range: FR-RAEI-HITACHI-SOFTWARE-LB_INTERNET
Skipping useless range: FR-RAEI-CGR-CINEMAS-LB_INTERNET
Skipping useless range: FR-RAEI-MINISTERE-DE-LA-DEFENSE-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Merged range 'Customer Interconnexion With RAEI Backbone', with range 'GI - Customer Interconnexion With RAEI Backbone'
Skipping useless range: FR-RAEI-RSA-LB_INTERNET
Merged range 'GI - Customer Interconnexion With RAEI Backbone', with range 'Customer Interconnexion With RAEI Backbone'
Skipping useless range: FR-RAEI-RSA-EBAVURAGE-TRONCONNAGE-LB_INTERNET
Skipping useless range: FR-RAEI-BEFEC---PRICE-WATERHOUSE-LB_INTERNET
Skipping useless range: FR-RAEI-***-ALLIANCE-POLICE-NATIONALE-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: NameShield Paris TeleHouse2
Skipping useless range: Nameshield Redbus Courbevoie
Skipping useless range: Nameshield Interoute Aubervilliers
Skipping useless range: DNS ANYCAST NETWORK
Skipping useless range: MINISTERO INTERNO DIPARTIMENTO DELLA P.S
Skipping useless range: block for PI assignments
Skipping useless range: Priority Telecom Norway Core Services Ostfold
Skipping useless range: Priority Telecom Norway Exchange
Skipping useless range: Priority Telecom Home Offices
Skipping useless range: Priority Telecom Norway Hosting Talkemore
Skipping useless range: Priority Telecom Norway hosting NAT
Skipping useless range: Priority Telecom Norway
Skipping useless range: Priority Telecom Link Networks Ostfold
Skipping useless range: Priority Telecom Backbone Connections
Skipping useless range: Priority Telecom Customer Private WAN Links
Skipping useless range: Priority Telecom Tunnel WAN Links
Skipping useless range: Priority Telecom VoIP ISDN Flex platform
Skipping useless range: Priority Telecom Gigabit Ethernet test equipment
Skipping useless range: Priority Telecom, Netconnect Overlay, BACKBONE
Skipping useless range: Priority Telecom Customer Private WAN Links
Skipping useless range: Cinekid
Skipping useless range: Priority Telecom Customer Private WAN Links
Skipping useless range: Priority Telecom Infrastructure, Loopbacks etc
Skipping useless range: Priority Telecom Customer Private WAN Links
Skipping useless range: Priority Telecom Customer Private WAN Links (DSL)
Skipping useless range: CANAL+ Services BV
Skipping useless range: Macromedia
Skipping useless range: NL-PRIORITY-20030603
Skipping useless range: Maatschap Muurmans advocaten
Skipping useless range: Moscow Russia, ID-3918, JSC \"PricewaterhouseCoopers Audit\"
Skipping useless range: FR-RAEI-MOTOROLA--SAS-CENTRE-DE-RECHER-LB_INTERNET
Skipping useless range: FR.RAEI.GAUMONT.BUENA.VISTA.INTERNATIO.LB.INTERNET
Skipping useless range: FR-RAEI-DIRECTION-PERSONNEL-MILITAIRE-LB_INTERNET
Skipping useless range: Eircom Customer Assignment
Skipping useless range: ZHIVAGORECORDS
Skipping useless range: OGORMANCINEMAS
Skipping useless range: OGORMANCINEMASSTILLORGAN
Skipping useless range: ZHIVAGORECORDS
Skipping useless range: DROPINRECORDING
Merged range 'Net for Software Company Ing. Alfred Gunsch', with range 'Net for Software Company Inf. Alfred Gunsch'
Merged range 'Consulale of the Latvian Republic in Vitebsk', with range 'Consulale of the Latvian Republic in Vitebsk'
Skipping useless range: www.CrazyGameserver.de
Skipping useless range: smais.is.site
Skipping useless range: MALONEMARTINSOLICITORS
Skipping useless range: Screen Digest
Skipping useless range: HONEYWELLSPA
Skipping useless range: BUREAU VERITAS ITALIA SRL
Skipping useless range: TOSHIBAMEDICALSYSTEMSSRL
Skipping useless range: SOC.COOP. LAVORO E GIUSTIZIA
Skipping useless range: Script kiddies
Skipping useless range: OVH SAS|Anti-p2p
Skipping useless range: IBM ITALIA SPA
Skipping useless range: IBM ITALIA SPA
Skipping useless range: SIEMENS SPA
Skipping useless range: SIEMENS SPA
Skipping useless range: SIEMENS SPA
Skipping useless range: NOKIA ITALIA SPA
Skipping useless range: STUDIO LEGALE ASSOCIATO AVVOCATI ARIZIA - VALENTINI
Skipping useless range: ADP SRL
Skipping useless range: Dedibox|Anti-p2p
Skipping useless range: COMMERCE
Skipping useless range: AT&T PEBBLE BEACH PRO-AM-071227180558
Skipping useless range: AT&T PEBBLE BEACH PRO-AM-071227185455
Skipping useless range: Geo Publishing
Skipping useless range: Real Networks
Skipping useless range: Hasbro Interactive, Inc
Skipping useless range: NBC.Interactive.Inc
Skipping useless range: Ziff Davis Education Direct
Skipping useless range: Real Networks
Skipping useless range: Department of the Navy
Skipping useless range: 3Com Corporation
Skipping useless range: BBN Corporation
Skipping useless range: Hewlett-Packard
Skipping useless range: National Aeronautics and Space Administration
Skipping useless range: National Aeronautics and Space Administration
Skipping useless range: National Aeronautics and Space Administration
Skipping useless range: IBM Schaumburg USF
Skipping useless range: IBM
Skipping useless range: IBM block
Skipping useless range: Patrick Air Force Base
Skipping useless range: National Aeronautics and Space Administration
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: EDS Network Naming and Addressing Management (NNAM)
Skipping useless range: HQ SSG/DIGNN
Skipping useless range: HQ AFRC/SCO
Skipping useless range: HQ AFRC/SCO
Skipping useless range: Keesler Air Force Base
Skipping useless range: SSG/DIGN
Skipping useless range: HQ AFRC/SCO
Skipping useless range: Air National Guard
Skipping useless range: Andersen Air Force Base
Skipping useless range: DLA Systems Automation
Skipping useless range: DEFENSE LOGISTIC AGENCY
Skipping useless range: DECC Ogden
Skipping useless range: DSCR-ZOO
Skipping useless range: Defense Reutilization and Marketing Service
Skipping useless range: United States Naval Academy
Skipping useless range: Motorola Korea
Skipping useless range: Industrial Research Limited
Skipping useless range: Industrial Research Limited, Wellington
Skipping useless range: Industrial Research Limited
Skipping useless range: Gracefield Research Centre (IRL)
Skipping useless range: Quest Reliability LLC
Skipping useless range: Gracefield Research Centre (IRL)
Skipping useless range: HQ AFRC/SCO
Skipping useless range: 28th Communictions Squadron
Skipping useless range: 4th Communications Squadron
Skipping useless range: 27th Communications Squadron
Skipping useless range: 366 CS/SCBB
Skipping useless range: 9th Communications Squadron
Skipping useless range: 99th Communications Squadron
Skipping useless range: DoD Network Information Center
Skipping useless range: USArmy National Guard Bureau
Skipping useless range: Boeing Corporation
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: Lucent Technologies
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: AT&T Bell Laboratories
Skipping useless range: HQ 5th Signal Command
Skipping useless range: State of Minnesota
Skipping useless range: Irish Government
Skipping useless range: DoD Network Information Center
Skipping useless range: DoD Network Information Center
Skipping useless range: Wright-Patterson Air Force Base
Skipping useless range: Commander-In-Chief
Skipping useless range: 48th Tactical Fighter Wing
Skipping useless range: DISA ITESO
Skipping useless range: DISA Columbus Level II NOC
Skipping useless range: DoD Network Information Center
Skipping useless range: DoD Network Information Center
Skipping useless range: DoD Network Information Center
Skipping useless range: HQ, 5th Signal Command
Skipping useless range: Naval Sea Systems Command
Skipping useless range: 106TH SIGNAL BRIGADE
Skipping useless range: Polycom Ltd. Portable Block
Skipping useless range: Polycom Ltd. Portable Block
Skipping useless range: BC GOV ITSD - SINGAREN (BCSYSTEMS13)
Skipping useless range: Government of Canada research lab connected to BC Gigapop via
Skipping useless range: Simcoe County Health Services
Skipping useless range: County of Simcoe
Skipping useless range: Gouvernement du Quebec - MSSS
Skipping useless range: ONT-GOV2
Skipping useless range: ONT-GOV3
Skipping useless range: The Procter and Gamble Company
Skipping useless range: Concentrator Management Desk
Skipping useless range: Air National Guard
Skipping useless range: DoD Network Information Center
Skipping useless range: Software Editing Corporation
Skipping useless range: 598th US Army TML Group
Skipping useless range: MTMC
Skipping useless range: USASC
Skipping useless range: USAISC Western Area
Skipping useless range: Commander
Skipping useless range: Defense Contract Management Agency
Skipping useless range: DoD Network Information Center
Skipping useless range: Headquarters, USAAISC
Skipping useless range: EDS
Skipping useless range: State Electricity Commission, Victoria (138756)
Skipping useless range: Dr. Ruff Software GmbH
Skipping useless range: HQ 5th Signal Command
Skipping useless range: HQ, 5th Signal Command
Skipping useless range: Army Information Systems Software Center MELPAR-NET2 (NET-147-104-0-0-1)
Skipping useless range: HQ, 5th Signal Command
Skipping useless range: 1112th Signal Battalion
Skipping useless range: Oracle-CoSprings AGG
Skipping useless range: Oracle-RMDC-AGG
Skipping useless range: Oracle-RestonVA-AGG
Skipping useless range: EDS Network Naming and Addressing Management (NNAM)
Merged range 'EMI MUSIC DE MEXICO SA DE CV', with range 'EMI MUSIC DE MEXICO SA DE CV'
Skipping useless range: COMUNE DI ANDRIA
Skipping useless range: McDonald\
Skipping useless range: NATO Headquarters
Skipping useless range: Adobe Systems Inc
Skipping useless range: Los Angeles Municipal Court
Skipping useless range: California Department of Corrections
Skipping useless range: US Army Information Systems Command
Skipping useless range: DoD Network Information Center
Skipping useless range: DoD Network Information Center
Skipping useless range: DoD Network Information Center
Skipping useless range: PEO STAMIS
Skipping useless range: United States Army Corps of Engineers
Skipping useless range: United States Army Corps of Engineers
Skipping useless range: United States Army Corps of Engineers
Merged range 'PEO STAMIS', with range 'DoD Network Information Center'
Merged range 'United States Army Corps of Engineers', with range 'DoD Network Information Center'
Skipping useless range: PEO STAMIS
Merged range 'DoD Network Information Center, DoD Network Inform', with range 'DoD Network Information Center'
Skipping useless range: United States Army Corps of Engineers
Skipping useless range: Directorate of Information Management
Skipping useless range: Interscope 360
Skipping useless range: Rain Cinema, Inc
Skipping useless range: UASISC-Vint Hill
Skipping useless range: Council of Ministers Office
Skipping useless range: Network Operations Center
Skipping useless range: DoD Network Information Center
Skipping useless range: www.ktjlaw.com
Skipping useless range: Police Buildings No. 3 - Misr Station
Skipping useless range: Techno Mina Communications - TMC
Skipping useless range: Smart Link Project Office
Skipping useless range: NLM.NIH.GOV maintainer
Skipping useless range: Wipro, Limited
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: State of Georgia (DOAS-CSD)
Skipping useless range: bt fakes NaviSite - Los Angeles
Skipping useless range: Your OneStop Network, Inc
Skipping useless range: ClearBlue Technologies - Vienna, VA
Skipping useless range: ClearBlue Technologies - New York City
Skipping useless range: ClearBlue Technologies - San Francisco, CA
Skipping useless range: Navisite-Surebridge-Andover
Skipping useless range: ClearBlue Technologies - Emmeryville, CA
Skipping useless range: ClearBlue Technologies - Dallas
Skipping useless range: ClearBlue Technologies - Los Angeles
Skipping useless range: ClearBlue Technologies - Dallas
Skipping useless range: China-Beijing-persistent connection attempts(revis
Merged range 'Verestar', with range 'Verestar'
Skipping useless range: Verestar
Skipping useless range: route object for IBM
Skipping useless range: Route Object for IBMGSMIA
Skipping useless range: IBM
Skipping useless range: BBN Communications
Skipping useless range: Bull HN Information Systems Inc
Skipping useless range: Royal Signals and Radar Establishment
Skipping useless range: Argonne National Laboratory
Skipping useless range: Argonne National Laboratory
Skipping useless range: Argonne National Laboratory
Skipping useless range: CSIRO IT Services
Skipping useless range: Hewlett-Packard Company
Skipping useless range: Schlumberger Laboratory for Computer Science
Skipping useless range: Agilent Technologies Europe
Skipping useless range: HP Halifax
Skipping useless range: U.S. Army CECOM RDEC Software Engineering Directo
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Hughes Aircraft Company
Skipping useless range: Hewlett-Packard Company HP4 (138815)
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: HQ US Central Command
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: White Sands Missile Range
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Naval Reserve Information System Office
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: imported inetnum object for IRSS
Skipping useless range: Procter&Gamble Route to Brussels VPN
Skipping useless range: Agilent Technologies
Skipping useless range: Pepsi Cola Company
Skipping useless range: Agilent Technologies
Skipping useless range: Agilent Technologies
Skipping useless range: SPAWAR System Center, National Capitol Region
Skipping useless range: SPAWAR SCC NCR
Skipping useless range: SSG/DIGN
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: California Department of Corrections
Skipping useless range: Center for Information Services
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: NOAA National Geodetic Survey
Skipping useless range: Hewlett-Packard Sverige AB
Skipping useless range: Tyco Electronics Corporation
Skipping useless range: EDS Network Naming and Addressing Management (NNAM)
Skipping useless range: Booya.music.de-Drizzly.de,Pdntdr.de www.vdm-musik
Skipping useless range: Hewlett-Packard Company (135438)
Skipping useless range: Motorola Network Computing
Skipping useless range: Motorola
Merged range 'Picturetel Corporation', with range 'Bogon'
Skipping useless range: Syscom Computer Engineering Co,Ltd
Skipping useless range: USAREUR ODCSIM, Office of Command,Control, and Com
Skipping useless range: Navy Computers and Telecommunications Station NCTSW-NET7 (NET-192-73-210-0-1)
Skipping useless range: Navy Computers and Telecommunications Station NCTSW-NET8 (NET-192-73-211-0-1)
Skipping useless range: Navy Computers and Telecommunications Station NCTSW-NET9 (NET-192-73-212-0-1)
Skipping useless range: Honeywell Paper Machine Automation Center
Skipping useless range: DoD Network Information Center
Skipping useless range: Thomson Professsional Publishing
Skipping useless range: MKS Inc
Skipping useless range: U.S. Merit Systems Protection Board
Skipping useless range: EDS, Koeln
Skipping useless range: MTMC-SUNNYPOINT
Skipping useless range: MTMC-CHARLESTON
Skipping useless range: 833d Transportation Battalion
Skipping useless range: Central Regional Storage Management Office
Skipping useless range: 596th Transportation Terminal Group
Skipping useless range: US Army Aviation and Missile Command
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: Motorola Internet Block 2 via CSC
Skipping useless range: EDS Network Naming and Addressing Management (NNAM)
Skipping useless range: Motorola
Skipping useless range: EDS Network Naming and Addressing Management (NNAM)
Skipping useless range: Directorate of Information Management
Skipping useless range: Koninklijke Philips Electronics N.V
Merged range 'Koninklijke Philips Electronics N.V', with range 'Philips Kommunikations Industrie'
Skipping useless range: Philips Fernmeldewerk GmbH
Skipping useless range: Naval Hospital Cherry Point
Skipping useless range: City of Turku
Skipping useless range: Cambridgeshire County Council
Skipping useless range: Software & Systeme Erfurt GmbH
Skipping useless range: British Columbia Provincial Government
Merged range 'SACLANT Undersea Research Centre', with range 'NATO SACLANT Undersea Research Centre'
Skipping useless range: SACLANT Undersea Research Centre
Skipping useless range: Bureau of Medicine and Surgery
Skipping useless range: Bureau of Medicine and Surgery
Skipping useless range: Toshiba Electronics Europe GmbH
Skipping useless range: TOSHIBA-EUROPEAN-NETWORK
Skipping useless range: TOSHIBA-EUROPE
Skipping useless range: TOSHIBA-EUROPE
Skipping useless range: route for northrop grumman
Skipping useless range: CreatRoute for customer Northrop Grumman
Skipping useless range: Boeing Computer Support Services
Skipping useless range: U.S. ARMY - Electronic Warfare / RSTAD
Skipping useless range: Eduskunnan kirjasto (Library of Parliament)
Skipping useless range: HQAMC
Skipping useless range: Perot Systems
Merged range 'DOIM', with range 'DoD Network Information Center'
Skipping useless range: Scientific Atlanta
Skipping useless range: Scientific Atlanta
Skipping useless range: Commissariat a l'Energie Atomique
Skipping useless range: Commissariat a L'Energie Atomique
Skipping useless range: 3M UK LTD
Skipping useless range: SOCIALSTYRELSEN
Skipping useless range: European Regional Medical Center
Skipping useless range: Boeing Computer Support Services
Skipping useless range: Hewlett-Packard Company
Skipping useless range: Hewlett-Packard Company
Skipping useless range: DISA, Joint Interoperability
Merged range 'HQ, 5th Signal Command', with range 'NETCOM'
Skipping useless range: Texas Instruments IS&S Electronic Communications
Skipping useless range: Commander, Task Force SIX THREE, Naples, Italy
Skipping useless range: Hewlett-Packard Company
Skipping useless range: Ft. Gordon Contracting Office
Skipping useless range: U.S. ARMY Tank-Automotive Command
Skipping useless range: Directorate of Information Management
Skipping useless range: MIPA-R
Merged range 'DoD Network Information Center', with range 'NETCOM'
Skipping useless range: Department of Energy
Skipping useless range: Philips Pontiac Mazda
Skipping useless range: GOVONCA8
Skipping useless range: GOVONCA9
Skipping useless range: State of Texas, Office of the Governor
Skipping useless range: route for Hewlett Packard
Skipping useless range: State of Washington Department of Revenue
Skipping useless range: GOVERNMENT SYSTEMS INC
Skipping useless range: COMNAVSURFLANT
Skipping useless range: Procter&Gamble Route to Brussels POP
Skipping useless range: Procter&Gamble Route to Brussels Extranet
Skipping useless range: Pure Software, Inc
Skipping useless range: Pure Software, Inc
Skipping useless range: NET-OMAHA-CITY4
Skipping useless range: Mitsui Computer Ltd
Skipping useless range: High Performance Computing Modernization Office
Skipping useless range: CSIRO IT Services (134162)
Skipping useless range: NBC UNIVERSAL, INC
Skipping useless range: Simon & Schuster
Skipping useless range: Stadtverwaltung Winterthur
Skipping useless range: Stadtverwaltung Winterthur
Skipping useless range: The Walt Disney Company Ltd
Skipping useless range: World Health Organisation
Skipping useless range: World Health Organisation
Skipping useless range: World Health Organisation
Skipping useless range: Siemens Nixdorf Informationssysteme AG
Skipping useless range: Umweltministerium des Landes Sachsen-Anhalt, Magdeburg
Skipping useless range: CCTA, The Government Centre for Information Syste
Skipping useless range: FR-MESR-03-Ministere-de-l
Merged range ' Commissariat a l'Energie Atomique', with range 'Commissariat a l'
Skipping useless range: Commissariat a l'Energie Atomique
Skipping useless range: Commissariat a l'Energie Atomique
Skipping useless range: FR-MESR-05-Ministere-de-l
Skipping useless range: FR-MESR-06-Ministere-de-l
Skipping useless range: FR-MESR-07-Ministere-de-l
Skipping useless range: MRES - Ministere de l'Enseignement Superieur et de
Skipping useless range: Commissariat a l'Energie Atomique
Skipping useless range: Havas Informatique
Skipping useless range: SONY-C-NET
Skipping useless range: Brunner Reinhard
Skipping useless range: GDATA Software GmbH
Skipping useless range: Mannheimer Morgen Grossdruckerei und Verlag GmbH
Skipping useless range: www.policjawielun.pnet.pl
Skipping useless range: www.ems.com.pl
Skipping useless range: Advocatenkantoor van Dam
Skipping useless range: Stichting Amsterdams Filmhuis
Skipping useless range: Filmhuis Den Haag
Skipping useless range: Agentur fuer Arbeit Paderborn ARGE
Skipping useless range: Geologische Bundesanstalt
Skipping useless range: Philips Electronics Nederland BV
Skipping useless range: Benelux Merkenbureau
Skipping useless range: Bundesamt fuer Strahlenschutz
Skipping useless range: Ministerie van Buitenlandse Zaken
Skipping useless range: Valtionvarainministerio
Skipping useless range: Siemens AG
Skipping useless range: Comune di Trento
Skipping useless range: Military Technical Academy, Bucharest
Skipping useless range: FR-RAEI-ATMEL-GRENOBLE-FW-OPENX-OLE
Skipping useless range: FR-RAEI-HITACHI-DATA-SYSTEMS-FW-OPENX-OLE
Skipping useless range: FR-RAEI-LYCEE-MILITAIRE-DE-ST-CYR-FW-OPENX-OLE AP2
Skipping useless range: FR-RAEI-MUTUELLE-GENERALE-DE-LA-POLICE-FW-OPENX-OL
Skipping useless range: Avenir havas media
Merged range ' Police Training Centre', with range 'Police Training Centre'
Skipping useless range: Police Training Centre
Skipping useless range: Bundesanstalt fuer Arbeit
Skipping useless range: Landkreis Potsdam-Mittelmark
Skipping useless range: Siemens Nixdorf Informationssysteme AG, Muenchen
Skipping useless range: FR-RAEI-GEMPLUS-LB_INTERNET
Skipping useless range: FR-RAEI-ATMEL-NANTES-SA-LB_INTERNET
Skipping useless range: FR-RAEI-ATI-TECHNOLOGIES-FRANCE-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-BJNC1
Skipping useless range: FR-RAEI-FRANCE-TELECOM-REL_SMTP
Skipping useless range: CapGemini
Skipping useless range: FR-RAEI-ATMEL-ROUSSET-LB_INTERNET
Skipping useless range: FR-RAEI-LEXMARK-INTERNATIONAL-SNC-LB_INTERNET
Skipping useless range: FR-RAEI-LEXMARK-INTERNATIONAL-SAS-LB_INTERNET
Skipping useless range: FR-RAEI-PHILIPS-INTERNET-CONSULTING-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: Gemeindepruefungsanstalt Baden-Wuerttemberg, Stuttgart
Skipping useless range: www.law.co.il
Skipping useless range: ubi-soft romania
Skipping useless range: SUMI SOFTWARE DEVELOPMENT
Skipping useless range: ERNST & YOUNG SRL
Skipping useless range: Adaptec, Inc
Skipping useless range: Autodesk, Inc
Skipping useless range: State of California
Skipping useless range: Konami.of.America.Inc.US
Skipping useless range: Canon Information Systems
Skipping useless range: THQ
Skipping useless range: City of Simi Valley
Skipping useless range: City of Los Angeles Department of Airports
Skipping useless range: Navy Systems Support Group
Skipping useless range: Texas Instruments - Acer Inc
Skipping useless range: Philips Taiwan Ltd
Skipping useless range: Ministry of Defence
Skipping useless range: Philips Electronics Industries Taiwan Ltd
Skipping useless range: Thomson Television Singapore Pte Ltd
Skipping useless range: Kyushu Matsushita Electric (Malaysia) Sdn. Bhd
Skipping useless range: IBM Singapore Pte Ltd
Skipping useless range: Tata Technologies Pte Ltd
Skipping useless range: Motorola Malaysia Sdn Bhd
Skipping useless range: Honeywell Pte Ltd
Skipping useless range: Ministry of Defence
Skipping useless range: NEC Semiconductors Singapore Pte. Ltd
Skipping useless range: Public Service and Merit Protection Commission
Skipping useless range: Australian Federal Police
Skipping useless range: Health Insurance Commission
Skipping useless range: Department of Employment,Education,Training and Youth Affairs
Skipping useless range: Department Of Employment Education Training And Youth Affairs
Skipping useless range: Department of Workplace Relation and Small Business
Skipping useless range: Ernst & Young
Skipping useless range: Australian Broadcasting Corporation
Skipping useless range: Attorney-General\
Skipping useless range: Department of Fair Trading
Skipping useless range: Aboriginal & Torres Strait Islander Commission
Skipping useless range: Joint House Department
Skipping useless range: Department of the Treasury
Skipping useless range: Waterways Authority
Skipping useless range: Health Insurance Commission
Skipping useless range: Western Australia Police Service
Skipping useless range: Australian Taxation Office
Skipping useless range: Department of Housing
Skipping useless range: Bundesamt fuer Wehrtechniek und Beschaffung
Skipping useless range: Sony.Corporation.Digital.Telecommunications.Networ
Skipping useless range: GE Toshiba Silicone Co., Ltd
Skipping useless range: Sony.Broadband.Solutions.Corp.JP
Skipping useless range: Data General CC
Skipping useless range: Sun Microsystems GmbH c/o Global SAP-Sun Competence Center
Skipping useless range: IBM Deutschland
Skipping useless range: Intel GmbH
Skipping useless range: SIEMENS AG
Skipping useless range: Compaq EMEA
Skipping useless range: Ernst & Young Consulting GmbH
Skipping useless range: Andersen Consulting
Skipping useless range: Cognos GmbH
Skipping useless range: Compaq EMEA
Skipping useless range: RCSC Networking SAP-AG
Skipping useless range: UNISYS Deutschland GmbH
Skipping useless range: ORACLE Deutschland GmbH
Skipping useless range: ORACLE Deutschland GmbH
Skipping useless range: Redwood Software BV
Skipping useless range: ORACLE Deutschland GmbH
Skipping useless range: IBM Deutschland
Skipping useless range: IBM Deutschland
Skipping useless range: Sony Marketing (Japan) Inc
Skipping useless range: Mint Bureau Ministry Of Finance
Skipping useless range: Nippon Koei Co Ltd
Skipping useless range: Naval Supply Systems Command
Skipping useless range: Metro Goldwyn Mayer, Inc
Skipping useless range: Price Waterhouse LLP
Skipping useless range: Synopsys, Inc
Skipping useless range: EMC Corporation, Hopkinton
Skipping useless range: Radio e Televisao Record S.A
Skipping useless range: Fuji Photo Film do Brasil Ltda
Skipping useless range: SAP, Inc
Skipping useless range: State of Florida - Dept of Revenue
Skipping useless range: PWC BPO do Brasil Ltda
Skipping useless range: Hallesche Wasser und Abwasser
Skipping useless range: DASSAULT AVIATION
Skipping useless range: Defensie Telematica Organisatie
Skipping useless range: Sun Microsystems GmbH
Skipping useless range: Intel Corporation
Skipping useless range: Mannheimer Versorgungs- und Verkehrsgesellschaft m
Skipping useless range: AEROSPATIALE MISSILES
Skipping useless range: BVG Berliner Verkehrsbetriebe
Skipping useless range: Naval Supply Systems Command
Skipping useless range: SAP Belgium NV/SA
Skipping useless range: SAP Arabia - Gulf Region
Skipping useless range: SAP Romania SRL
Skipping useless range: SAP Bilgi Islem Sistemleri
Skipping useless range: SAP Arabia
Skipping useless range: SAP CYPRUS LTD
Skipping useless range: SAP Bulgaria
Skipping useless range: SAP Asia Pte. Ltd
Skipping useless range: SAP France S.A
Skipping useless range: Stadtverwaltung Wiesloch
Skipping useless range: Intershop Communications
Skipping useless range: DSC Software AG
Skipping useless range: City of Vancouver
Skipping useless range: Voigt Software und Unternehmensberatung GmbH
Skipping useless range: Justice and Attorney General
Skipping useless range: Amt fuer Agrarstruktur Hannover
Skipping useless range: Kreiswerke Heinsberg GmbH
Skipping useless range: SAP America, Inc
Skipping useless range: Neubrandenburger Stadtwerke GmbH
Skipping useless range: Landeshauptstadt Stuttgart
Skipping useless range: SAP AG
Skipping useless range: Siebel Systems, Inc
Skipping useless range: Staedtische Werke Ueberlandwerke Coburg
Skipping useless range: Hampshire County Council
Skipping useless range: SAP AG
Skipping useless range: Motorola, Inc. Corporate Contracts
Skipping useless range: Berliner Hafen- und Lagerhausbetriebe (BEHALA)
Skipping useless range: Neue Westfaelische Zeitung GmbH & Co. KG
Skipping useless range: Cinemax AG, Hamburg
Skipping useless range: Landeszentralbank Bremen Niedersachsen
Skipping useless range: Stadtwerke Luedenscheid GmbH
Skipping useless range: Mitsubishi Electric PC Division Apricot Computers Ltd
Skipping useless range: Group 4 Securitas AG
Skipping useless range: Hasbro, Inc
Skipping useless range: ITT Industries Europe GmbH
Skipping useless range: Sony of Canada Ltd
Skipping useless range: Optimus S.A
Skipping useless range: Random House Inc
Skipping useless range: AEG Elektrofotografie GmbH
Skipping useless range: Deutsche Bundesbank
Skipping useless range: Stadtwerke Neumuenster
Skipping useless range: Provincie Noord-Brabant
Skipping useless range: DEUTSCHE ROCKWOOL
Skipping useless range: Stadtwerke Muenchen
Skipping useless range: Staedtische Werke Krefeld AG
Skipping useless range: Landschaftsverband Westfalen-Lippe
Skipping useless range: SAP AG
Skipping useless range: Diamond Trading Company Ltd
Skipping useless range: PriceWaterhouseCoopers Danismanlik Hizmetleri A.S
Skipping useless range: Landeszentralbank im Freistaat Bayern
Skipping useless range: Stadtwerke Dueren GmbH
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: SAP Arabia
Skipping useless range: SAP Bilgi Islem Sistemleri
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Ernst & Young Oence SMMM A.S
Skipping useless range: Saudi Aramco Mobil Refinery Company
Skipping useless range: SAP AG
Skipping useless range: Korps Landelijke Politiediensten Dienst I & A
Skipping useless range: Siemens Business Services
Skipping useless range: SAP AG
Skipping useless range: IBM Schweiz SAP Solutions/Datamind
Skipping useless range: Compaq Computer AG
Skipping useless range: AIRBUS INDUSTRIE
Skipping useless range: IBM FRANCE
Skipping useless range: SAP Arabia - Gulf Region
Skipping useless range: TRW SABELT S.p.A. Div. Automotive
Skipping useless range: EDS Electronic Data Systems
Skipping useless range: IBM Svenska AB
Skipping useless range: Securitas AG
Skipping useless range: ANDERSEN CONSULTING S.A
Skipping useless range: CAP Gemini Sverige AB
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: EDS (Schweiz) AG
Skipping useless range: SAP Hrvatska d.o.o
Skipping useless range: STG - Coopers & Lybrand AG
Skipping useless range: HEWLETT PACKARD FRANCE
Skipping useless range: EDS Informationstechnologie u. Service (Deutschland) GmbH
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Cap Gemini
Skipping useless range: IBM Turk Ltd. Sti
Skipping useless range: Optimus S.A
Skipping useless range: Sharp Electronics (UK) Ltd
Skipping useless range: Sharp Electronics Europe GmbH
Skipping useless range: SAP Bilgi Islem
Skipping useless range: VIVENDI UNIVERSAL EDUCATION FRANCE
Skipping useless range: SAP AG
Skipping useless range: SAP Italia Consulting S.r.l
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Cap Gemini
Skipping useless range: POLYGRAM S.A
Skipping useless range: Rank Video Services Ltd., Willstaett
Skipping useless range: Ernst & Young Unternehmensberatung GmbH
Skipping useless range: Datenzentrale.Baden.Wuerttemberg.Ger
Skipping useless range: Zentraldienst fuer Technik und Beschaffung der Pol
Skipping useless range: SAP AG
Skipping useless range: Azienda Municipalizzata Servizi Ancona IT
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: DASSAULT AVIATION
Skipping useless range: Defensie Telematica Organisatie
Skipping useless range: EMI Italiana S.p.A
Skipping useless range: Sun Microsystems GmbH
Skipping useless range: AEROSPATIALE MISSILES
Skipping useless range: Banca Nazionale del Lavoro
Skipping useless range: Landeszentralbank.im.Freistaat.Bayern
Skipping useless range: EDS Electronic Data Systems
Skipping useless range: SAP AG
Skipping useless range: Georg Westermann Verlag
Skipping useless range: EUROCOPTER FRANCE S.A
Skipping useless range: Agfa-Gevaert AG Wiesbaden
Skipping useless range: Adaptec, Inc
Skipping useless range: EDS/Fides Informatik Basel
Skipping useless range: EDS PROGICAL
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Daimler-Benz Aerospace Airbus
Skipping useless range: Sun Microsystems GmbH
Skipping useless range: TRW Steering Systems Ltd
Skipping useless range: Bauer Software + Informatik GmbH
Skipping useless range: SAP AG
Skipping useless range: Etat du Valais.CH
Skipping useless range: Voigt Software und Unternehmensberatung GmbH
Skipping useless range: Ministerium.fuer.Finanzen.u.Energie.des.Landes.Sch
Skipping useless range: Andersen Consulting
Skipping useless range: Landeshauptstadt Stuttgart
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Accenture Services GmbH
Skipping useless range: Mitsubishi Electric PC Division Apricot Computers Ltd
Skipping useless range: Group 4 Securitas AG
Skipping useless range: Landeshauptstadt Hannover
Skipping useless range: Elektra Birseck
Skipping useless range: Philips Domestic Appliances
Skipping useless range: Deutsche Bundesbank
Skipping useless range: Telemedia International S.p.A
Skipping useless range: DASSAULT AVIATION
Skipping useless range: Provincie Noord-Brabant
Skipping useless range: Deutsche Bundesbank
Skipping useless range: DIPUTACION DE BARCELONA
Skipping useless range: SAP AG
Skipping useless range: EDS PROGICAL
Skipping useless range: SAP-RSA-I08-NL
Skipping useless range: ATAG Ernst & Young AG
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: CAP GEMINI FRANCE, Toulouse
Skipping useless range: Deutsche Welle Radio & TV International
Skipping useless range: Landeshauptstadt Stuttgart
Skipping useless range: COMPAQ FRANCE
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Unisys Belgium SA
Skipping useless range: Amdahl Deutschland GmbH
Skipping useless range: IBM Nederland N.V t.b.v. SSC Rijksoverheid
Skipping useless range: HEWLETT - PACKARD GMBH
Skipping useless range: Defence Fuels Group
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Siemens AG VS OIL2
Skipping useless range: Compaq Computer GmbH
Skipping useless range: Datenzentrale.Schleswig.Holstein.Ger
Skipping useless range: Compaq Computer AG
Skipping useless range: SAP AG
Skipping useless range: TRW Occupant Restraint Systems GmbH
Skipping useless range: IBM (Schweiz) AG
Skipping useless range: CAS Software GmbH, Pirmasens
Skipping useless range: CAP GEMINI FRANCE
Skipping useless range: Edison S.p.A., Milano
Skipping useless range: SapTech A/S
Skipping useless range: ERNST & YOUNG, Consultores
Skipping useless range: Koch, Neff & Oetinger & Co. GmbH
Skipping useless range: Politiken - Aktieselskabet Dagbladet
Skipping useless range: Cinemax AG, Hamburg
Skipping useless range: PRICE WATERHOUSE Edificio Caja Madrid
Skipping useless range: MINISTERIO DE MEDIO AMBIENTE
Skipping useless range: SUNY-CLD is implementing the US-AID
Skipping useless range: Universal Industries AS
Skipping useless range: Someru Municipality
Skipping useless range: Suure-Jaani Town Government
Skipping useless range: Rural Municipality of Puka
Skipping useless range: The Euro-Baltic Software Alliance AS
Skipping useless range: Estonian Electrical Inspectorate
Skipping useless range: Keila City Municipality
Skipping useless range: Verestar
Skipping useless range: COM de RED.ES
Skipping useless range: COM de RED.ES
Skipping useless range: Dictionary attacker
Skipping useless range: Dictionary attacker
Skipping useless range: Dictionary attacker
Skipping useless range: Stadtverwaltung Kaiserslautern
Skipping useless range: Virgin Megastore (Cyprus) Ltd
Skipping useless range: Panasonic Deutschland GmbH
Skipping useless range: CISCO SYSTEMS ITALY SRL
Skipping useless range: Sony Overseas SA Representative Office in Kazakhst
Skipping useless range: Ministere de l'Amenagement du Territoire, de l'Eq
Skipping useless range: Ministere de l'Amenagement du Territoire, de l'Equ
Skipping useless range: Ministere de l'Amenagement du Territoire, de l'Eq
Skipping useless range: SYBASE MAROC
Skipping useless range: ministere de la communication
Skipping useless range: MINISTERE DE LA SANTE
Skipping useless range: Ministere de la POPULATION
Skipping useless range: Ministere des Affaires Etrangeres et de la Coopera
Skipping useless range: Ministere de la Formation Professionnelle
Skipping useless range: consulat general des usa
Skipping useless range: consulat general des usa
Skipping useless range: dream filmsproductions sarl
Skipping useless range: ministere de l\'emploi , des affaires sociales
Skipping useless range: Force Royale de l'AIR MAROC
Skipping useless range: DIRECTION DE LA FORMATION DU MINISTERE DU TOURISME
Skipping useless range: Ministere d'Amenagement
Skipping useless range: Eidos Germany
Skipping useless range: FR-RAEI-LEXMARK-INTERNATIONAL-SNC-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-DVI-RAEI
Skipping useless range: FR-RAEI-FRANCE-TELECOM-USEI-LYON-RAEI
Skipping useless range: FR-RAEI-SAMSUNG-ELECTRONICS-FRANCE-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: LANDWELL-ASSOCIE
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI B
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-USGC-VANVES-LB_INTERNET
Skipping useless range: Datalog Software GmbH
Skipping useless range: European Space Agency (ESA)
Skipping useless range: Development of software for knowledge management
Skipping useless range: production of luminous ensign
Skipping useless range: Internet security
Skipping useless range: The systimax solution is the premier structured connectivity
Skipping useless range: Avaya Reasearch
Skipping useless range: Hardware & Software Dealer
Skipping useless range: Development of software for knowledge management
Skipping useless range: our company deals with Compaq
Skipping useless range: PUBBLICITA SU SCHERMI CINEMA
Skipping useless range: International LAWYERS Company
Skipping useless range: International LAWYERS Company
Skipping useless range: music evolution
Skipping useless range: MP3 Italy
Skipping useless range: : our company deals with Compaq, Hp and Ibm Pc
Skipping useless range: web application and sw developement
Skipping useless range: Internet Security Systems
Skipping useless range: Scottish UFI IP Allocation from SOL
Skipping useless range: Dundee Chamber of Commerce
Skipping useless range: Scottish Parliament IP Assignment from SOL
Skipping useless range: Touch-Stone
Skipping useless range: TOUCHSTONE
Skipping useless range: Scottish Parliament
Skipping useless range: Scottish Parliament
Skipping useless range: Scottish UFI IP Allocation 2 from SOL
Skipping useless range: WEDICS Glasgow City Council Assignment
Skipping useless range: Cinema Communications Services srl
Skipping useless range: Banca Nazionale del Lavoro
Skipping useless range: Amb. del Regno del Lesotho
Skipping useless range: GI - Customer Interconnection with RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-URN-RAEI
Skipping useless range: FR-RAEI-CBS-FONDERIES-FWVPN
Skipping useless range: CapGemini
Skipping useless range: FR-RAEI-TELEMEDIA-LB_INTERNET
Skipping useless range: FR-RAEI-LEXMARK-INTERNATIONAL-SNC-LB_INTERNET
Skipping useless range: FR-RAEI-SHARP-ELECTRONICS-FRANCE-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: FR-RAEI-FRANCE-TELECOM-R-D-RAEI
Skipping useless range: FR-RAEI-FT-THE-DIGITAL-COPYRIGHT-NETWO-FWVPN
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: NETWORK OF SONY ENGLAND
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM--DAC-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-HITACHI-POWER-TOOL-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-DR-ROUEN-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI B
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-AE-LA-DEFENSE-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-LB_INTERNET
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: FR-RAEI-AMD-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-RAEI
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: Customer Interconnection with RAEI Backbone
Skipping useless range: FR-RAEI-FRANCE-TELECOM-CABLE-RAEI
Skipping useless range: FR-RAEI-PHILIPS-LE-MANS-RAEI
Skipping useless range: CapGemini
Skipping useless range: CapGemini
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: FR-RAEI-PREFECTURE-DE-POLICE-LB.INTERNET.FR
Skipping useless range: CORRIGANCORRIGAN
Skipping useless range: MCMAHONOBRIENDOWNSOLICITOR
Skipping useless range: Airforce Academy gen. M. R. Stefanik in Kosice
Skipping useless range: Virtual server belonging to
Skipping useless range: defense.gouv.fr
Skipping useless range: Dassault
Skipping useless range: KMD-NET-KMO
Skipping useless range: KMD-NET-SERVICES
Skipping useless range: KMD-NET-SERVICES
Skipping useless range: Centrul Republican de Informatica Republica Moldov
Skipping useless range: MINISTERUL MUNCII,system for dial up acces throug
Skipping useless range: Boonty subnet #1
Skipping useless range: Berwin Leighton Solicitors
Skipping useless range: TRW SA
Skipping useless range: Government Policy Consultants Ltd
Skipping useless range: Network of CAP GEMINI
Skipping useless range: Network of Mercury Interactive UK LTD
Skipping useless range: Network of Halliburton Energy Services
Skipping useless range: Network of SONY MUSIC (UK) LTD
Skipping useless range: Network of Sony Computer Entertainmen
Skipping useless range: Network of
Skipping useless range: Network of Orrick
Skipping useless range: Network of IBM PSS IERS EMEA COC
Skipping useless range: Network of IBM MO MWSM Software
Skipping useless range: Novell.Gmbh.Network.Ger
Skipping useless range: Network of IBM Germany Content Hosting
Skipping useless range: Network of AGILENT FINANCIAL SERVICES
Skipping useless range: Network of SAP AG
Skipping useless range: Network of Ernst Young
Skipping useless range: Network of IBM Germany Megacenter
Skipping useless range: Network of Levi Strauss & Co
Skipping useless range: Network of Cardiff Software
Skipping useless range: Network of The McGraw-Hill Companies
Skipping useless range: Network of IBM for ABB NL
Skipping useless range: Network of IBM Denmark
Skipping useless range: Network of IBM Svenska AB
Skipping useless range: Network of IBM Svenska AB
Skipping useless range: Network of IBM SMTP Service
Skipping useless range: Network of IBM Svenska AB
Skipping useless range: Network of IBM Svenska AB
Skipping useless range: Network of 3Com Nordic AB
Skipping useless range: Network of SAP Svenska AB
Skipping useless range: Network of IBM Norge AS
Skipping useless range: Network of IBM Portugal
Skipping useless range: Network of SONY LDA
Skipping useless range: Network of OneWeb IBM Finland
Skipping useless range: Network of SAP D.O.O
Skipping useless range: Network of Delphi Packard Elektrik Sistemleri Ltd
Skipping useless range: Network of IBM Ireland Limited
Skipping useless range: Network of Novell
Skipping useless range: Network of IBM Dow Chemical
Skipping useless range: Network of PACKETEER EUROPE B.V
Skipping useless range: Network of IBM Nederland/BTO
Skipping useless range: Network of SAP Finland Oy
Skipping useless range: Network of Accenture
Skipping useless range: Network of Sony Music Entertainment Kft
Skipping useless range: Network of AVAYA COMMUNICATIONS
Skipping useless range: Network of Sony Computer Entertainment Austria
Skipping useless range: Network of IBM EBUSINESS
Skipping useless range: Network of Eugster & Frismag
Skipping useless range: Network of Agfa Gevaert
Skipping useless range: Network of IBM E-SNI
Skipping useless range: Network of FUJI Hunt In
Skipping useless range: Network of IBM EBUSINESS
Skipping useless range: Network of Agfa-Gevaert
Skipping useless range: Network of Agfa Gevaert
Skipping useless range: Network of IBM Finland
Skipping useless range: Network of Agfa Gaevert
Skipping useless range: Network of IBM Finland
Skipping useless range: Network of IBM France
Skipping useless range: Jxrvamaa Municipality
Skipping useless range: CPS Perm
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: FR-RAEI-HITACHI-SOFTWARE-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-BE-MSE-STI-LB_INTERNET
Skipping useless range: FR-RAEI-DEPOLABO-CHEZ-FRANCE-TELECOM-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE--TELECOM---TRANSPAC-RAEI
Skipping useless range: FR-RAEI-NOKIA-FRANCE-SA-LB_INTERNET
Skipping useless range: FR-RAEI-MINISTERE-DE-LA-DEFENSE-LB_INTERNET
Merged range 'GI - Customer Interconnection with RAEI Backbone', with range 'GI - Customer Interconnexion With RAEI Backbone'
Merged range 'GI - Customer Interconnexion With RAEI Backbone', with range 'GI - Customer Interconnexion With RAEI Backbone'
Skipping useless range: FR-RAEI-HITACHI-PRINTING-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-RAEI
Merged range 'GI - Customer Interconnection with RAEI Backbone', with range 'GI - Customer Interconnexion With RAEI Backbone'
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: Stadtwerke Bielefeld GmbH
Skipping useless range: POLYGRAM S.A
Skipping useless range: ASETRA group AG BU Consulting SAP
Skipping useless range: Azienda Municipalizzata Servizi Ancona IT
Skipping useless range: CIC Video International
Skipping useless range: Ministere Bruxelles Capitale, BRUXELLES
Skipping useless range: EUROCOPTER FRANCE S.A
Skipping useless range: SAP (UK) Ltd
Skipping useless range: LEG Landesentwicklungsgesellschaft
Skipping useless range: Bundesministerium fuer Finanzen, Wien
Skipping useless range: SAP Italia Consulting S.r.l
Skipping useless range: Panasonic Canada Inc
Skipping useless range: SAP America, Inc
Skipping useless range: LEG Landesentwicklungsgesellschaft Thueringen mbH
Skipping useless range: AEROSPATIALE AERONAUTIQUE
Skipping useless range: NIBM Intern Transport en Magazijn Techniek B.V
Skipping useless range: Nuernberger Rechenzentrale GmbH
Skipping useless range: Zentrum fuer Kommunikationstechnik
Skipping useless range: FABRICA NACIONAL DE MONEDA Y TIMBRE
Skipping useless range: Cap Gemini Singapore Pte Ltd
Skipping useless range: Bundeswehr Systeminstandsetzungszentrum 890
Skipping useless range: Bundeswehr Systeminstandsetzungszentrum 860
Skipping useless range: Bundeswehr Systeminstandsetzungszentrum 870
Skipping useless range: SUN Microsystems AG
Skipping useless range: Bundeswehr Systeminstandsetzungszentrum 800
Skipping useless range: System-Instandsetzungszentrum 850 Kaserne Starkenburg
Skipping useless range: Stadtverwaltung Biel
Skipping useless range: Comune di Bologna Pz. Maggire 6 I-40121 Bologna OS
Skipping useless range: Birra Peroni Industriale S.p.A
Skipping useless range: Maerkisches Verlags- und Druckhaus GmbH & Co. KG
Skipping useless range: Stadtreinigung Hamburg
Skipping useless range: DISTRIBUIDORA DE TELEVISION DIGITAL, S.A
Skipping useless range: PricewaterhouseCoopers
Skipping useless range: Landeszentralbank im Freistaat Sachsen und in Thue
Skipping useless range: Bundesstadt Bonn
Skipping useless range: Abrechnungszentrum Emmendingen des
Skipping useless range: Bertelsmann mediaSystems GmbH
Skipping useless range: SCM Microsystems GmbH
Skipping useless range: Ericsson Ahead Communications System GmbH
Skipping useless range: Syncra Software, Inc
Skipping useless range: ITT Cannon
Skipping useless range: JVC.Canada.Inc.CA
Skipping useless range: SAP Canada Inc
Skipping useless range: EMC Corporation, Hopkinton
Skipping useless range: Autodesk, Inc
Skipping useless range: Hasbro, Inc
Skipping useless range: ATI Technologies Inc
Skipping useless range: Macromedia, Incorporated
Skipping useless range: Gobierno del Estado de Guanajuato
Skipping useless range: OCE Printing Systems
Skipping useless range: Bundesdruckerei GmbH
Skipping useless range: DVG Gesellschaft fuer Datenverarbeitung der badischen Spark
Skipping useless range: Bundesministerium der Finanzen
Skipping useless range: Warner Bros Stores (UK) Ltd
Skipping useless range: Daewoo Electronics UK Ltd
Skipping useless range: Maerkische Verlags- und Druck-GmbH
Skipping useless range: Oce (Schweiz) AG
Skipping useless range: Stadtwerke Trier GmbH
Skipping useless range: Stadtwerke Trier GmbH
Skipping useless range: SAP New Zealand Limited
Skipping useless range: NSW Treasury
Skipping useless range: Department of Foreign Affairs and Trade
Skipping useless range: IP Australia
Skipping useless range: Department of Corrections
Skipping useless range: Healthlink South Limited
Skipping useless range: Administrative Appeals Tribunal
Skipping useless range: Austereo Pty Limited
Skipping useless range: NIIT Limited
Skipping useless range: SAP AG
Skipping useless range: Ministere Bruxelles Capitale, BRUXELLES
Skipping useless range: SAP (UK) Ltd
Skipping useless range: LEG Landesentwicklungsgesellschaft
Skipping useless range: Sun Microsystems (Schweiz) AG, Schwerzenbach
Skipping useless range: Bundesministerium fuer Finanzen, Wien
Skipping useless range: Told & Skattestyrelsen
Skipping useless range: Future Software GmbH, Haar b. Muenchen
Skipping useless range: SAP Italia Consulting S.r.l
Skipping useless range: SAP AG
Skipping useless range: Gruner + Jahr AG & Co
Skipping useless range: SDL International
Skipping useless range: Schott Musik International GmbH & Co. KG, Mainz
Skipping useless range: Group 4 Securitas (International) B.V
Skipping useless range: LEG Landesentwicklungsgesellschaft Thueringen mbH
Skipping useless range: Sony Deutschland GmbH
Skipping useless range: Bundeswehr.Systeminstandsetzungszentrum.890
Skipping useless range: Fuji Electric GmbH
Skipping useless range: JVC / Spitzer Electronic AG, Oberwil
Skipping useless range: AEROSPATIALE AERONAUTIQUE
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Bundeswehr.Systeminstandsetzungszentrum.800
Skipping useless range: System-Instandsetzungszentrum 850 Kaserne Starkenburg
Skipping useless range: Stadtverwaltung Biel
Skipping useless range: PricewaterhouseCoopers
Skipping useless range: DIRECCION GENERAL DE LA POLICIA
Skipping useless range: DFS Deutsche Flugsicherung GmbH
Skipping useless range: Comune di Bologna IT
Skipping useless range: SAP AG
Skipping useless range: PricewaterhouseCoopers Ltd
Skipping useless range: Cap Gemini
Skipping useless range: DISTRIBUIDORA DE TELEVISION DIGITAL, S.A
Skipping useless range: Ministerie van Justitie, 2511 EX 'S-GRAVENHAGE
Skipping useless range: Landeszentralbank.im.Freistaat.Sachsen.und.in.Thue
Skipping useless range: Landeszentralbank.in.Rheinland.Pfalz.und.im.Saarla
Skipping useless range: LVA Landesversicherungsanstalt Baden
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Dell Computer GmbH
Skipping useless range: Provinciale Hogeschool Hasselt Provincie Limburg
Skipping useless range: Price Waterhouse Sp. z o.o. Business Information Technologies
Skipping useless range: Ericsson Ahead Communications System GmbH
Skipping useless range: ERNST & YOUNG, LDA
Skipping useless range: Bundeswertpapierverwaltung
Skipping useless range: Bundesdruckerei GmbH
Skipping useless range: CPA Rechenzentrum Gesellschaft
Skipping useless range: DVG Gesellschaft fuer Datenverarbeitung der badischen Spark
Skipping useless range: Bundesministerium.der.Finanzen
Skipping useless range: Warner Bros Stores (UK) Ltd
Skipping useless range: Daewoo Electronics UK Ltd
Skipping useless range: Oce (Schweiz) AG
Skipping useless range: Sun Microsystems GmbH
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: Unisys Italia S.p.A
Skipping useless range: Huntsman.Film.Products.DE
Skipping useless range: Haarmann, Hemmelrath & Partner
Skipping useless range: Honeywell AG
Skipping useless range: Radio Televisione Italiana S.p.A
Skipping useless range: Como Softwareentwicklungs GmbH
Skipping useless range: INVAR SYSTEM Sp. z o.o. Oddzial Konsultingu SAP
Skipping useless range: HZD - Hessische Zentrale fuer Datenverarbeitung
Skipping useless range: Edel Records GmbH
Skipping useless range: KSD Kanton und Stadt Schaffhausen.CH
Skipping useless range: Bundesamt.fuer.Wirtschaft
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: LVA Landesversicherungsanstalt Wuerttemberg
Skipping useless range: SAP AG
Skipping useless range: PricewaterhouseCoopers
Skipping useless range: EMPRESA NACIONAL BAZAN DE CONSTRUCCION NAVALES MILITARES
Skipping useless range: SAP America, Inc
Skipping useless range: Bayerisches Staatsministerium fuer Ernaehrung
Skipping useless range: Ministerie van Volksgezondheid, Welzijn en Sport
Skipping useless range: Veritas Software Vertriebs GmbH
Skipping useless range: Ernst & Young MCS Sp. z o.o
Skipping useless range: Baudirektion Kanton Zuerich.CH
Skipping useless range: Bundesministerium.fuer.Ernaehrung.Landwirtschaft.u
Skipping useless range: SAP Italia Consulting S.r.l
Skipping useless range: CANAL PLUS
Skipping useless range: Centre National d'Etudes Spatiales
Skipping useless range: OCE Groupware Technology
Skipping useless range: CAMARA OFICIAL DE COMERCIO INDUSTRI
Skipping useless range: NSE Software AG
Skipping useless range: PricewaterhouseCoopers
Skipping useless range: SAP AG
Skipping useless range: SAP AG
Skipping useless range: COREBIT SapTech A/S
Skipping useless range: PriceWaterhouseCoopers
Skipping useless range: Landesbetrieb für Datenverarbeitung und Statistik
Skipping useless range: ANDERSEN CONSULTING, S.A
Skipping useless range: Kirch Media KG aA
Skipping useless range: IBM
Skipping useless range: Europaeisches Patentamt
Skipping useless range: European Patent Office
Skipping useless range: Koordination GLOBUS-Betriebe GmbH & Co. KG
Skipping useless range: Universitaet Hannover
Skipping useless range: Ataris GmbH
Skipping useless range: Sussex Police
Skipping useless range: AMD Saxony Manufacturing GmbH
Skipping useless range: Zweckverband Kommunale Datenverarbeitung Oldenburg
Skipping useless range: Remote connection to SAP
Skipping useless range: Banca Nazionale del Lavoro
Skipping useless range: Loewen-Entertainment GmbH
Skipping useless range: Rostocker Strassenbahn AG (RSAG)
Skipping useless range: Panasonic Industrial Europe Ltd
Skipping useless range: Fuji Magnetics GmbH
Skipping useless range: SAP France S.A
Skipping useless range: SAP AG
Skipping useless range: SAP America MCI Frame port
Skipping useless range: AC Nielsen
Skipping useless range: AC.Nielsen.US
Skipping useless range: Deluxe Video Services Inc
Skipping useless range: Science Applications International
Skipping useless range: Compaq Computer Corporation
Skipping useless range: Parametric Technology Corporation
Skipping useless range: Schlumberger Oil Services
Skipping useless range: Universal Systems
Skipping useless range: Siemens Power Corporation
Skipping useless range: EMC Corporation
Skipping useless range: Integrated Device Technology
Skipping useless range: SAP Canada
Skipping useless range: Syncra Software, Inc
Skipping useless range: ITT Cannon
Skipping useless range: Lockheed Martin Enterprise Information Systems
Skipping useless range: SAP America ISDN port
Skipping useless range: Northrop Grumman IS&A
Skipping useless range: Centro Cuesta Nacional
Skipping useless range: Transmeta
Skipping useless range: Lockheed Martin Enterprise
Skipping useless range: SAP Canada SHL Systemhouse
Skipping useless range: Sharp Electronics Corporation
Skipping useless range: SAP Canada MultiHexa
Skipping useless range: Cognos Incorporation
Skipping useless range: Motorola, Inc
Skipping useless range: SAP AG
Skipping useless range: IBM Competence Center
Skipping useless range: Daewoo Electronics Deutschland GmbH
Skipping useless range: LVA Landesversicherungsanstalt Hannover
Skipping useless range: Bundesamt.fuer.Wehrverwaltung.Bonn
Skipping useless range: Bundeswehr.Systeminstandsetzungszentrum.860
Skipping useless range: Bundeswehr.Systeminstandsetzungszentrum.870
Skipping useless range: Giesecke & Devrient GmbH
Skipping useless range: Willy Bogner GmbH & Co. KGaA
Skipping useless range: SAP AG
Skipping useless range: Raytheon Aircraft
Skipping useless range: Unisys Corporation
Skipping useless range: FileNet Corporation
Skipping useless range: Panasonic Kyushu Matsushita Electric Co
Skipping useless range: SAS Institute, Inc
Skipping useless range: Kimberly-Clark Corporation
Skipping useless range: Lexmark International Group
Skipping useless range: Integrated Device Technology, Inc
Skipping useless range: Texas Instruments Incorporated
Skipping useless range: Advanced Micro Devices, Inc
Skipping useless range: Computer Sciences Corporation
Skipping useless range: Siemens Canada Ltd
Skipping useless range: American Chamber of Commerce e.V
Skipping useless range: AGAVA Software Ltd Network
Skipping useless range: SIEMENS-BUSINESS SERVICES
Skipping useless range: Cap Gemini
Skipping useless range: SIEMENS-BUSINESS SERVICES
Skipping useless range: British Interactive Broadcasting Ltd
Skipping useless range: Sega Europe Ltd
Skipping useless range: Thompson Learning
Skipping useless range: FTIP002580968 KENT COUNTY COUNCIL
Skipping useless range: ITT Travel program
Skipping useless range: Country_Artists_Ltd
Skipping useless range: Slaughter and May
Skipping useless range: Wilkin_Chapman_Solicitors
Skipping useless range: IDEALWORLD PRODUCTION
Skipping useless range: FTIP002715117 Cap Gemini
Skipping useless range: RAI - Radio Televisione Italiana
Skipping useless range: Italy</OWNER>
Skipping useless range: Harmony Music Srl
Skipping useless range: RAI - Radio Televisione Italiana
Skipping useless range: Prima Movie & Pubblhing Co. Srl
Skipping useless range: www.dcs.pl
Skipping useless range: Network of Apple Computer
Skipping useless range: Network of IBM Proctor and Gamble
Skipping useless range: Network of Integrated Device Tech
Skipping useless range: Network of Apple Computers
Skipping useless range: Network of EMEA IGA IBM Network Support
Skipping useless range: Network of IBM MSA Deutschland for Sued Chemie
Skipping useless range: Network of IBM Global Network Finland
Skipping useless range: Network of IBM Deutschland GmbH
Skipping useless range: Network of Regimo Basel (IBM MSA Customer)
Skipping useless range: Network of Filemaker
Skipping useless range: Network of ACS
Skipping useless range: Network of IBM BCU Hungary
Skipping useless range: Network of IBM e-Business for Elsevier Science
Skipping useless range: Network of Apple Computers
Skipping useless range: Network of SAP CR spol. s r.o
Skipping useless range: Network of IBM Russian Feder. (RU)
Skipping useless range: Network of Nicosia Bureau
Skipping useless range: Network of Apple Computer
Skipping useless range: CPS Perm
Skipping useless range: Embassy of the Czech Republic in Latvia
Skipping useless range: Provider Local Registry State Information Network Agency
Skipping useless range: State Information Network Agency (VITA) HQ networ
Skipping useless range: Comune di Pisa is the Municipality of Pisa IT
Skipping useless range: Siemens Nixdorf Informationssys
Skipping useless range: Siemens Nixdorf Informationssysteme AG
Skipping useless range: Snohomish County Dept. of Information Services
Skipping useless range: City of Spokane
Skipping useless range: Epoch Internet
Skipping useless range: Epoch Internet
Skipping useless range: Crane Productions, Inc
Skipping useless range: Supreme Court of Pennsylvania
Skipping useless range: Air Force Research Laboratory
Skipping useless range: DoD Network Information Center
Skipping useless range: Autodesk, Inc
Skipping useless range: COMNAVSURFLANTEstimating Repair Activity
Skipping useless range: COMNAVSURFLANT
Skipping useless range: IBM
Skipping useless range: IBM
Skipping useless range: IBM Canada
Skipping useless range: Central Intelligence Agency
Skipping useless range: The Defense Information Systems Agency
Skipping useless range: Texas Department of Commerce
Skipping useless range: United States Army Corps of Engineers
Skipping useless range: DoD Network Information Center
Skipping useless range: US Army Communications Electronics Command
Skipping useless range: Defense Contract Management Agency
Skipping useless range: Defense Contract Management Agency
Skipping useless range: Defense Contract Management Agency
Skipping useless range: Defense Contract Management Agency
Skipping useless range: LOCKHEED MISSILES & SPACE COMPANY
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: NASA/Johnson Space Center
Skipping useless range: Naval Electronic Systems Engineering Center
Skipping useless range: Board of Governors of the Federal Reserve System
Skipping useless range: Board of Governors of the Federal Reserve System
Skipping useless range: Board of Governors of the Federal Reserve System
Skipping useless range: Board of Governors of the Federal Reserve System
Skipping useless range: New York State Department of Public Service
Skipping useless range: ADP Dealer Services
Skipping useless range: ADP (Roads)
Skipping useless range: ADP Bloomfield
Skipping useless range: Sacramento Housing & Redevelopment Agency (SHRA)
Skipping useless range: Texas Instruments IS&S Electronic Communications
Skipping useless range: Air Force Technical Applications Center
Skipping useless range: Loral Instrumentation
Skipping useless range: US Army North
Skipping useless range: DOD EDUCATION ACTIVITY
Skipping useless range: DOD DEPENDENTS SCHOOLS
Skipping useless range: Fermilab
Skipping useless range: Armed Forces Radio and Television - Broadcast Center
Skipping useless range: Avalanche Development Co
Skipping useless range: Charlotte County Clerk of Court
Skipping useless range: State Compensation Fund
Skipping useless range: Andersen Consulting (Dallas SMC)
Skipping useless range: Compaq Computer Corporation
Skipping useless range: Commander in Chief, U.S. Pacific Fleet
Skipping useless range: Naval Command Control and Ocean Surveillance Cent
Skipping useless range: Motion Picture Association
Skipping useless range: Loral Corporation
Skipping useless range: National Archives and Records Administration
Skipping useless range: National Archives and Records Administration
Skipping useless range: NLM.NIH.GOV maintainer
Skipping useless range: Network Associates, Inc
Skipping useless range: City of Ft. Collins, ICS Dept
Skipping useless range: IBM Corporation
Skipping useless range: Wright-Patterson Air Force Base
Skipping useless range: NAVAL AIR WARFARE CENTER AIRCRAFT DIVISION
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: Lockheed-Martin Corporation
Skipping useless range: City of Fort Collins
Skipping useless range: U.S. Department of Energy - METC
Skipping useless range: Traveling Software INC
Skipping useless range: Disney Worldwide Services, Inc
Skipping useless range: VMARK Software, Inc
Skipping useless range: United Nations Environmental Program (UNEP) Nai
Skipping useless range: NASA Ames Research Center
Skipping useless range: NASA Goddard Space Flight Center
Skipping useless range: Allied-Signal Aerospace Company
Skipping useless range: United States Department Of Energy
Skipping useless range: US Dept of Energy Office of Scientific and Technical Information
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Battele Pacific Northwest Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: Battele Pacific Northwest Laboratory
Skipping useless range: Allied-Signal Aerospace Company
Skipping useless range: Lawrence Berkeley National Laboratory
Skipping useless range: EDS Network Naming and Addressing Management (NNAM
Skipping useless range: Office of Information Technology
Merged range 'IBM Corporation', with range 'IBM Corporation'
Skipping useless range: IBM Corporation
Skipping useless range: IBM Corporation
Skipping useless range: IBM Corporation
Skipping useless range: City of Minneapolis
Skipping useless range: SAIC-ITER San Diego Co-Center
Skipping useless range: Hughes STX Corporation
Skipping useless range: CACI
Skipping useless range: Central Intelligence Agency
Skipping useless range: Central Intelligence Agency
Skipping useless range: Washington State Energy Office
Skipping useless range: NAVAL AIR WARFARE CENTER AIRCRAFT DIVISION
Skipping useless range: DISA, Joint Interoperability
Skipping useless range: Acxiom Corp
Skipping useless range: U.S. Probation & Pretrial Services
Skipping useless range: Government of Manitoba
Skipping useless range: Govt of Manitoba
Skipping useless range: iStar - Province of NS
Skipping useless range: iStar - Province of NS
Skipping useless range: Government of PEI
Skipping useless range: Saskatchewan Department of Health
Skipping useless range: National Software Company
Skipping useless range: City of Albuquerque
Skipping useless range: Sega of America, Inc
Skipping useless range: Sega of America, Inc
Skipping useless range: Connecticut Department of Environmental Protection
Skipping useless range: State of Oregon
Skipping useless range: General Services, State of Oregon
Skipping useless range: 89th MDSS/SGSI
Skipping useless range: Buena Vista Home Video Pty Ltd
Skipping useless range: NLM.NIH.GOV maintainer
Skipping useless range: U.S. Coast Guard Reserve
Skipping useless range: DEPARTMENT OF GENERAL ADMINISTRATION-STATE OF WASHINGTON
Skipping useless range: U.S. Department of the Interior
Skipping useless range: Elk Grove Village Police Department
Skipping useless range: Cook County Sheriffs Police
Skipping useless range: State of Washington
Skipping useless range: California Department of Personel Administration
Skipping useless range: California Department of Personel Administration
Skipping useless range: Federal Aviation Administration - ATC
Skipping useless range: Department of Housing and Urban Development
Skipping useless range: Tripler Army Medical Center
Skipping useless range: Air Force Technical Applications Center (AFTAC)
Skipping useless range: Air Force Technical Applications Center (AFTAC)
Skipping useless range: CITY AND COUNTY OF DENVER
Skipping useless range: SC Department of Commerce
Skipping useless range: National Weather Service Forecast Office, NOAA
Skipping useless range: Texas Instruments
Skipping useless range: Harris Publishing Co
Skipping useless range: City of El Cajon
Skipping useless range: City of Savannah
Skipping useless range: DoD Network Information Center
Skipping useless range: USAF, HQ ACC/SCTD
Skipping useless range: HQ ACC/SCBN
Skipping useless range: Toshiba America Electronic Components, Inc. (TAEC)
Skipping useless range: State of Washington - Legislative Service Center
Skipping useless range: State of Washington - Washington Traffic Safety Commission
Skipping useless range: Federal Reserve Bank of San Francisco
Skipping useless range: State of Louisiana Division of Administration
Skipping useless range: City of Beverly Hills
Skipping useless range: U.S. Center For Disease Control and Prevention
Skipping useless range: Virgin Island Mtr
Skipping useless range: ADP D/S Division
Skipping useless range: ADP VANCOUVER
Skipping useless range: ADP D/S SALES
Skipping useless range: ADP D/S
Skipping useless range: COLUMBIA INTL
Skipping useless range: NCTS Washington
Skipping useless range: Naval Research Laboratory, Marine
Skipping useless range: NAV RES LAB MARINE METEOROLOGY DIVISION
Skipping useless range: COMNAVSURFLANT
Skipping useless range: COMNAVSURFLANT
Skipping useless range: Defense Commercial
Skipping useless range: AFWAM SPO, SSC/XOW (US Air Force)
Skipping useless range: IBM
Skipping useless range: Raytheon
Skipping useless range: Raytheon
Skipping useless range: Verestar
Skipping useless range: Government of Ontario RAS
Skipping useless range: U.S. Dept. of Agriculture - NAL
Skipping useless range: U.S. Dept. of Agriculture - NAL
Skipping useless range: United States Army Corps of Engineers
Skipping useless range: U.S. Army Corps of Engineers
Skipping useless range: Organization of American States
Skipping useless range: U.S. Dept. of Energy - EIA
Skipping useless range: Department of Housing and Urban Development
Skipping useless range: General Services Administration
Skipping useless range: US Senate
Skipping useless range: Department of Housing and Urban Developement Nativ
Skipping useless range: Florida Information Resource Network
Skipping useless range: Air Force Technical Applications Center
Skipping useless range: Dept of Juvenile Justice and Delinquency
Skipping useless range: Governor\
Skipping useless range: Office of Juvenile Justice District 15b
Skipping useless range: Dept of Juvenile Justice and Delinquency
Skipping useless range: Division of Public Health
Skipping useless range: Secretary of State - Old Revenue Bldg
Skipping useless range: Div of Public Health/Epidemiology
Skipping useless range: Governors Office
Skipping useless range: Orange County Government
Skipping useless range: NC Dept of Juvenile Justice
Skipping useless range: Cleveland Co ACTS
Skipping useless range: NC Dept of Transportation
Skipping useless range: U.S. Army Claims Service
Skipping useless range: US ARMY-CECOM
Skipping useless range: DoD Network Information Center
Skipping useless range: Topographic Engineering Center
Skipping useless range: Object Software Development
Skipping useless range: State of NH ASDC
Skipping useless range: ADP D/S
Skipping useless range: ADP SALES/BLOOMFIELD
Skipping useless range: ADP AUTO-TELL SERVICES
Skipping useless range: ADP DEALER SERVICES
Skipping useless range: Orbotech Ltd
Skipping useless range: DOE-CA
Skipping useless range: Department of the Environment
Skipping useless range: RCMP-GRC1
Skipping useless range: Epic of Brewster
Skipping useless range: Barnstable County Registry of Deeds
Skipping useless range: Barnstable County Sheriffs Office
Skipping useless range: GOVONCA-C-246-119
Skipping useless range: IBM Canada Ltd
Skipping useless range: Verestar
Skipping useless range: Ministerio de Obras Publicas
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: SES-Americom Network
Skipping useless range: MINISTERIO DAS RELACOES EXTERIORES
Skipping useless range: SIEMENS Ltd. (138815)
Skipping useless range: Electoral Commission of Queensland
Skipping useless range: NSW Maritime Authority
Merged range ' Ministry for Planning', with range 'Ministry for Planning'
Skipping useless range: Ministry for Planning
Skipping useless range: Institut Statistique de Polynesie Francaise
Skipping useless range: Institut d'Ã©mission d'Outre Mer
Skipping useless range: Canal Plus - Polynesie
Skipping useless range: Presidence du Gouvernement de la Polynesie Franca
Skipping useless range: Universite de la Polynesie Francaise
Skipping useless range: Australian Agency for International Development
Skipping useless range: Australian Agency for International Development
Skipping useless range: The Australian Agency for International Developme
Skipping useless range: Australian Agency for International Development
Skipping useless range: CSIRO IT Services
Skipping useless range: CSIRO
Skipping useless range: CSIRO
Skipping useless range: Australian Railroad Group - ARG
Skipping useless range: Sony Precision Engineering Centre Singapore
Skipping useless range: COLIN NG & PARTNERS
Skipping useless range: JINGO RECORD CO., Ltd
Skipping useless range: Intrasoft Inc. Taiwan Branch
Skipping useless range: U-GEM Corporation Film,Camera,Photo Fishing
Skipping useless range: JINGO RECORD CO., Ltd
Skipping useless range: 117 Rouse Street
Skipping useless range: Donaldson Trumble Lawyers
Skipping useless range: Government Institution of Indonesia
Skipping useless range: US Naval Medical Research Unit No. 2
Skipping useless range: AIA Lab, Directorate of Information and Electroni
Skipping useless range: Ministry of Industry and Trade
Skipping useless range: Lubis Ganie Law Firm
Skipping useless range: Royal Netherland Embassy
Skipping useless range: Foreign Ministry to LISL subnet
Skipping useless range: EDS to LISL subnet
Skipping useless range: AGENT Pvt Ltd
Skipping useless range: World Health Organization subnet
Skipping useless range: Foreign Ministry Internal subnet
Skipping useless range: Marine Air Consolidation
Skipping useless range: Ministry of Housing
Skipping useless range: Coopers & Lybrand Associates
Skipping useless range: Lanka Electricity Company
Skipping useless range: SL Army
Skipping useless range: Batalanda Army subnet
Skipping useless range: Samsung Electronics
Skipping useless range: Voice of America
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Corrs Chambers Westgarth
Skipping useless range: Orc Software Australia
Skipping useless range: Natural Resources Management Program
Skipping useless range: Ip block for Regal Films Franciso Office
Skipping useless range: Bureau Of Treasury
Skipping useless range: BOBCOCK-HITACHI Philippines Inc
Skipping useless range: Eulogio Amang Rodriguez Institute
Skipping useless range: National Mapping and Resource Information Authori
Skipping useless range: Telecommunications Office (DOTC-TELOF)
Skipping useless range: Philippine Council for Agriculture, Forestry and
Skipping useless range: Philippine Council for Aquatic and
Skipping useless range: DOST-7 Regional Office (Lahug)
Skipping useless range: NEDA 10 Regional Office
Skipping useless range: Philippine Council for Health
Skipping useless range: Science and Technology Information Institute
Skipping useless range: Industrial Technology Development Institute
Skipping useless range: Philippine Council for Advanced Science and Techn
Skipping useless range: Philippine Council for Industry
Skipping useless range: Technology Application and Promotion Institute
Skipping useless range: National Research Council of the Philippines
Skipping useless range: AFRDIS
Skipping useless range: PHILRICE Batac
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Dream Wave Shizuoka Co., Ltd
Skipping useless range: Dream Wave Shizuoka Co., Ltd
Skipping useless range: Gansu government ,leased line user
Skipping useless range: zhejiang information 9sky music
Skipping useless range: p2p abusers
Skipping useless range: Appointment netbar of Nanping City of Fujian prov
Skipping useless range: Shiyan school of nanping City of Fujian province
Skipping useless range: zhengzhou local Tax bureau,
Skipping useless range: henan province social & science academe,
Skipping useless range: CAP GEMINI
Skipping useless range: MOTECH SOFTWARE PVT.LTD
Skipping useless range: INDIAN INSTITUTE OF SOFTWARE ENGINEERING
Skipping useless range: EASY BUY MUSIC
Skipping useless range: Aptech Computer Education
Skipping useless range: ORACLE BANGALORE
Skipping useless range: Verestar
Skipping useless range: Dharmala Securitas
Skipping useless range: Musica Studios, PT
Skipping useless range: Verestar
Skipping useless range: Veritas Software Solutions pvt ltd
Skipping useless range: 605,RAHEJA CHAMBERS
Skipping useless range: Intellevsions Software Lt
Skipping useless range: Logan City Council
Skipping useless range: TRADENEX.COM SDN BHD
Skipping useless range: Thales GeoSolutions Sdn Bhd
Skipping useless range: Thales Broadcast & Multimedia Inc
Skipping useless range: TRADENEX.COM SDN BHD
Skipping useless range: DRB-Hicom Defence Technologies Sdn Bhd
Merged range 'SINGAPORE POLICE FORCE', with range 'DENTSU-LTD-INFORMATION-SERVICES'
Merged range 'American Embassy Jakarta', with range 'PT. AGB Nielsen'
Skipping useless range: Wing Gee Advertising Production Co
Skipping useless range: Movielink Nikko
Skipping useless range: Movielink Great Eagle Hotel
Skipping useless range: American Consulate General, PST
Skipping useless range: Fujitsu Systems Business (Malaysia) Berhad
Skipping useless range: Film Company
Skipping useless range: Film Company
Skipping useless range: Leader in the Music industry
Skipping useless range: Software Integration Company
Skipping useless range: Fujitsu Systems Business (Malaysia) Berhad
Skipping useless range: Software House
Skipping useless range: Software solutions provider
Skipping useless range: Leader in the Music industry
Skipping useless range: Software House
Skipping useless range: Advocate & Solicitors
Skipping useless range: HP WholeSaler and Distributor
Skipping useless range: Mexican Embassy
Skipping useless range: Advocate & Solicitors
Skipping useless range: Software House
Skipping useless range: HP WholeSaler and Distributor
Skipping useless range: Broadcasting Company
Skipping useless range: Mexican Embassy
Skipping useless range: taisho town office
Skipping useless range: Ikegawa town office
Skipping useless range: Noichi Town Office
Skipping useless range: Fujitsu Shikoku Systems Ltd
Skipping useless range: LOCAL GOVERNMENT SOLUTIONS GROUP
Skipping useless range: Det Norske Veritas AS
Skipping useless range: Tottori Prefectual Government
Skipping useless range: Sekigane Town Office
Skipping useless range: Kyusyu Regional Bureau of PostalServices
Skipping useless range: InfoBears(FUJITSU MINAMI-KYUSHU SYSTEMS ENGINEERIN
Skipping useless range: InfoBears(FUJITSU MINAMI-KYUSHU SYSTEMS ENGINEERING LIMITED)
Skipping useless range: FUJITSU MINAMI-KYUSHU SYSTEMSENGINEERING LIMITED
Skipping useless range: InfoBears(FUJITSU MINAMI-KYUSHU SYSTEMS ENGINEERIN
Skipping useless range: InfoBears(FUJITSU MINAMI-KYUSHU SYSTEMS ENGINEERING LIMITED)
Skipping useless range: Ministry of Health, Labour and Welfare
Skipping useless range: Nagano Broadcasting Systems,inc
Skipping useless range: Koshoku city office
Skipping useless range: INA City Office
Skipping useless range: FUJITSU NAGANO SYSTEMS ENGEERING LIMITED
Skipping useless range: Society of The National Chamber of Agriculture
Skipping useless range: NEC Soft, Ltd. Nagano
Skipping useless range: Rishirifuji Town Office
Skipping useless range: FUJITSU HOKKAIDO SYSTEMS ENGINEERING LIMITED
Skipping useless range: Ministry of International Trade and Industry
Skipping useless range: Kitahitoshima City Office
Skipping useless range: MITSUBISHI ELECTRIC
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK CORPORATION
Skipping useless range: Kyushu Mitsubishi Electoric Corporation
Skipping useless range: MITSUBISHI ELECTRIC SYSTEM & SERVICE CO.,LTD
Skipping useless range: Yamagata Mitsubishi Electric Corporation
Skipping useless range: MITSUBISHI ELECTRIC OSRAM Ltd
Skipping useless range: Wakayama Mitsubishi Electric Co.,LTD
Skipping useless range: Mitsubishi Electric Corporation
Skipping useless range: Mitsubishi Electric Corporation
Skipping useless range: MITSUBISHI ELECTRIC SYSTEM&SERVICE CO.,LTD
Skipping useless range: MITSUBISHI ELECTRIC
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK CORPORATION
Skipping useless range: Mitsubishi Electric Information Network Corp
Skipping useless range: Mitsubishi Electric corporation
Skipping useless range: Mitsubishi Erectric Information Network Corporatio
Skipping useless range: MITSUBISHI ELECTRIC SYSTEMWARE CORPORATION
Skipping useless range: Mitsubishi Electric Information Systems Corporatio
Skipping useless range: Mitsubishi Electric Corporation
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK CORPORATION
Skipping useless range: Mitsubishi Electric Information Network Corp
Skipping useless range: Mitsubishi Electric Information Network Corp
Skipping useless range: MITSUBISHI ELECTRIC CORPORATION
Skipping useless range: Mitsubishi Electric Information Network Corp
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK COPRATION
Skipping useless range: Mitsubishi Electric Information Network Corp
Skipping useless range: MITSUBISHI ELECTRIC
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK CORPORATION
Skipping useless range: MITSUBISHI Electric Building Techno-service Co.,Lt
Skipping useless range: MITSUBISHI ELECTRIC INFORMATION NETWORK CORPORATION
Skipping useless range: Mitsubishi Electric Corporation
Skipping useless range: Mitsubishi Electric Plant Engineering Co.,LTD
Skipping useless range: Sony Communication Network Corporation
Skipping useless range: Department of Defence
Skipping useless range: Department of Defence
Skipping useless range: NSW Department of Mineral Resources (138815)
Skipping useless range: Australian Labour Party (140633)
Skipping useless range: Western Australia Department of Treasury (138822)
Skipping useless range: Western Australia Department of Treasury (134162)
Skipping useless range: City of Marion (131647)
Skipping useless range: Department of Housing (138815)
Skipping useless range: Ministry of Premier & Cabinet of WA (134162)
Skipping useless range: ah.co.nz
Skipping useless range: ah.co.nz
Skipping useless range: Brookfields Lawyers
Merged range 'Waverly Council', with range 'CAMPBELLTOWN CITY COUNCIL'
Merged range 'Scope Features Australia', with range 'ORACLE SYSTEMS PTY LTD'
Skipping useless range: Economic Department - Ministry of Defense
Skipping useless range: Hanoi US Embassy
Skipping useless range: Government of Singapore Investment Corporation
Skipping useless range: Department of Statistics
Skipping useless range: Asprecise Pte Ltd
Skipping useless range: ST Logistics
Skipping useless range: Singapore Aerospace
Skipping useless range: Knuerr Spectra
Skipping useless range: BH Billiton Marketing Asia Pte Ltd
Skipping useless range: NIIT Ltd,
Skipping useless range: Magic Software Enterprises India Pvt. Ltd
Skipping useless range: Tooltech Software (I) Ltd
Skipping useless range: Production Unit
Skipping useless range: Production Unit
Skipping useless range: The Associated Press - Dow Jones
Skipping useless range: Mphasis Software & Services Pvt. Ltd
Skipping useless range: Software Devlopment Unit
Skipping useless range: Raft Software Pvt. Ltd
Skipping useless range: Mphasis Software & Services Pvt. Ltd
Skipping useless range: Software Devlopment Unit
Skipping useless range: Software Devlopment Unit,
Skipping useless range: Software Devlopment Unit
Skipping useless range: Software Devlopment Firm
Skipping useless range: Microworld Software Services Pvt. Ltd
Skipping useless range: Raft Software Pvt. Ltd
Skipping useless range: The Associated Press - Dow Jones
Skipping useless range: ABACUS Distribution Systems (India) Pvt. Ltd
Skipping useless range: Tata InfoTech Ltd
Skipping useless range: Software Devlopment Unit
Skipping useless range: Software Devlopment Unit
Skipping useless range: Software Devlopment Unit
Skipping useless range: Ace Software Solutions India Pvt Ltd
Skipping useless range: Mphasis Software & Services Pvt. Ltd
Skipping useless range: Office Bo. 404, 4th Floor Pride Kumar Senate,
Skipping useless range: Niche Software Solutions Pvt. Ltd
Skipping useless range: AMERICAN EMBASSY
Skipping useless range: Australian Israel Chamber of Commerce
Skipping useless range: Impress Software Ptty Ltd
Skipping useless range: NRG - Production
Skipping useless range: Cranbrook Films Pty Ltd
Skipping useless range: Pyramid Softwate Development
Skipping useless range: Pyramid Softwate Development
Skipping useless range: SDE Software Development Training Center
Skipping useless range: Vietnam Ministry Of Fisheries - MOFI
Skipping useless range: McDonalds / McGeorge Food Philippines, Inc
Skipping useless range: GBP Software
Skipping useless range: MANIPAL MEDIRECORDS BANGALORE
Skipping useless range: AGNI SOFTWARE, BANGALORE
Skipping useless range: YODLEE SOFTWARE, BANGALORE
Skipping useless range: ORCHID SOFTWARE, BANGALORE
Skipping useless range: Software Development company in Bangalore
Skipping useless range: SOFTWARE COMPANY IN BANGALORE
Skipping useless range: SOBIS Software Bangalore
Skipping useless range: National Computerization Agency
Skipping useless range: Verestar
Skipping useless range: Onsystems
Skipping useless range: Onsystems
Skipping useless range: Angelnet Productions Inc
Skipping useless range: ISI
Skipping useless range: Government of Ontario RAS
Skipping useless range: CTS003-A
Skipping useless range: Time Warner Telecom
Skipping useless range: State of Louisiana Office of Telecommunications Ma
Skipping useless range: Atlantic Recording Corporation
Skipping useless range: JUSTICE-GOV
Skipping useless range: Rockstar Games Canada
Skipping useless range: IBM
Skipping useless range: Federal Aviation Administration
Skipping useless range: CHESTER COUNTY
Skipping useless range: Siemens Industrial Automation, Inc
Skipping useless range: Hughes Communications Inc
Skipping useless range: Atlantic Recording Corporation
Skipping useless range: RAYTHEON POLAR
Skipping useless range: Holme, Roberts & Owen
Skipping useless range: National Conference of State Legislatures
Skipping useless range: Activision
Skipping useless range: The Symantec Corporation
Skipping useless range: Western Governor\
Skipping useless range: Colorado Compensation Insurance Authority
Skipping useless range: Z-Axis Corp
Skipping useless range: National Conference of State Legislatures
Skipping useless range: Jefferson County Government
Skipping useless range: Brownleigh Court
Skipping useless range: Mine Safety and Health Administration
Skipping useless range: City of Colorado Springs
Skipping useless range: City of Fort Collins
Skipping useless range: City of Fort Collins
Skipping useless range: Gartner Group, Inc
Skipping useless range: Jefferson County Government
Skipping useless range: General Government Computing Center
Skipping useless range: Weld County Government
Skipping useless range: Mine Safety and Health Administration
Skipping useless range: ACCENTURE LLP
Skipping useless range: ACCENTURE LLP
Skipping useless range: IBM
Skipping useless range: NY State Department of Labor
Skipping useless range: American Job Bank/NYS Department of Labor
Skipping useless range: Nysernet, Inc
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: US Merchant Marine Academy
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: US Merchant Marine Academy
Skipping useless range: NYSERNet
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: U.S. Merchant Marine Academy
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: Nysernet/First Albany Corp
Skipping useless range: Nysernet/United Health Services
Skipping useless range: Nysernet/Thirteen/WNET
Skipping useless range: Nysernet/First Albany Corp
Skipping useless range: Nysernet/Monroe County Boces #1
Skipping useless range: Macrovision Corporation
Skipping useless range: La.Tax Commision New Orleans
Skipping useless range: Governor\
Skipping useless range: LA DEPARTMENT OF JUSTICE
Skipping useless range: DEPARTMENT OF CULTURE RECREATION AND TOURISM
Skipping useless range: Department of Health & Hospitals - Jackson
Skipping useless range: LOUISIANA DEPARTMENT OF ELECTIONS AND REGISTRATION
Skipping useless range: HCSSA
Skipping useless range: HCSSA
Skipping useless range: HCSSA
Skipping useless range: AEGIS TRAINING CENTER
Skipping useless range: ADP TORONTO/TRAINING
Skipping useless range: City of Barrie - 2
Skipping useless range: City of Barrie - 3
Skipping useless range: City of Barrie - 4
Skipping useless range: City of Barrie - 5
Skipping useless range: The City Of Barrie
Skipping useless range: Navy Network Information Center
Skipping useless range: SPAWAR SCC Pensacola Office
Skipping useless range: SONY-PICTURES-ENTERTAINMENT - Sony Pictures Entertainment Inc
Skipping useless range: SONY-PICTURES-ENTERTAINMENT - Sony Pictures Entertainment Inc
Skipping useless range: Oregon Legislative Administration Committee
Skipping useless range: Texas Legislative Budget Board
Skipping useless range: UNIVERSAL MERCURY
Skipping useless range: UNIVERSAL MERCURY
Skipping useless range: PWGSC - Govt Online Expo
Skipping useless range: Canadian Heritage
Skipping useless range: Public Works and Government Services Canada
Skipping useless range: Canadian Security Establishment
Skipping useless range: NAFTA Secretariat Canadian Section
Skipping useless range: Canadian Human Rights Tribunal
Skipping useless range: Military Police Complaints Commission
Skipping useless range: Natural Resources Canada
Skipping useless range: PWGSC
Skipping useless range: PWGSC
Skipping useless range: PWGSC
Skipping useless range: Canada Customs and Revenue Agency
Skipping useless range: Canada Customs and Revenue Agency
Skipping useless range: SCNet - NG SRA
Skipping useless range: Secure Channel - PWGSC
Skipping useless range: State of Nebraska, Division of Communications
Skipping useless range: EDS Canada
Skipping useless range: Virgin Mobile
Skipping useless range: sitaranetworks.com.site.CAISInternet
Skipping useless range: Stadtmauer Bailkin LLP
Skipping useless range: Law Offices of Michael E Pressman
Skipping useless range: Litigation Management Group
Skipping useless range: Electronic Data Systems (EDS)
Skipping useless range: Electronic Data Systems (EDS)
Skipping useless range: Yolo County Office of Education
Skipping useless range: FTC c/o AT&T Gov\
Skipping useless range: FTC c/o AT&T Gov\
Skipping useless range: FTC c/o AT&T Gov\
Skipping useless range: BLEDSOE DODGE INC
Skipping useless range: Loral Federal Systems Division
Skipping useless range: Epoch Customer Route
Skipping useless range: Connexion by Boeing
Skipping useless range: Rain Cinema, Inc
Skipping useless range: Virtual Internet Office / Agent
Skipping useless range: Smart & Bigger Fetherstonhaugh
Skipping useless range: CGI Group Inc
Skipping useless range: PWGSC Secure Channel
Skipping useless range: DirecTV
Skipping useless range: DirecTV
Skipping useless range: IBM
Skipping useless range: Turner Network Sales
Skipping useless range: ABC Radio Networks
Skipping useless range: Fresno County Office of Education
Skipping useless range: Kings County Government Center
Skipping useless range: Merced County Office of Education
Skipping useless range: Fresno County Office of Education
Skipping useless range: Gibson, Dunn & Crutcher
Skipping useless range: Mattel, Inc
Skipping useless range: Twentieth Century Fox
Skipping useless range: Info Systems Inc
Skipping useless range: Info Systems Inc
Skipping useless range: California Democratic Party
Skipping useless range: City of San Ramon
Skipping useless range: AT&T ANCS R&D Lab
Skipping useless range: Beveridge & Diamond, P.C
Skipping useless range: West Publishing Corporation
Skipping useless range: Hallmark Cards Inc
Skipping useless range: County of Ingham
Skipping useless range: Merchant & Gould
Skipping useless range: GT Interactive Software Corp
Skipping useless range: Keane, Inc
Skipping useless range: Masque Sound & Recording Corporation
Skipping useless range: Merchant & Gould
Skipping useless range: AT&T ANCS R&D Lab
Skipping useless range: AT&T ANCS R&D Lab
Skipping useless range: Novell Corp
Skipping useless range: AT&T ANCS R&D Lab
Skipping useless range: Novell Corp
Skipping useless range: SSA Southeast
Skipping useless range: SAVVIS Communications Corporation
Skipping useless range: Connexion by Boeing
Skipping useless range: Video Symphony
Skipping useless range: Worldwide Game Technology
Skipping useless range: Blur Studio / Referral Rep
Skipping useless range: Connexion By Boeing
Skipping useless range: Image Consultants/Prana Entertainment
Skipping useless range: L A Studios
Skipping useless range: L A Studios
Skipping useless range: Callahan and Blain
Skipping useless range: Natural Resources Defense Council
Skipping useless range: Epoch Backbone
Skipping useless range: Reel Mc Coy Fx
Skipping useless range: Summit Law Group
Skipping useless range: Musictoday LLC
Skipping useless range: Center Theatre Group Of Los Angeles
Skipping useless range: Office Of Government Ethics
Skipping useless range: Stratcom Communications Corp
Skipping useless range: Pie Town Productions
Skipping useless range: Law Offices Of Jon A Kodani
Skipping useless range: Stratcom Communications Corp
Skipping useless range: Stratcom Communications Corp
Skipping useless range: P M Publishing
Skipping useless range: Frost, Ruttenberg and Rothblatt P.C
Skipping useless range: T-Rex Production, Inc
Skipping useless range: Panamsat Chantilly- Internet
Skipping useless range: Ernst & Young LLP
Skipping useless range: Ernst & Young LLP
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: Columbia Productions Inc
Skipping useless range: Columbia Productions Inc
Skipping useless range: GE Capital
Skipping useless range: Heller, Ehrman, White & McAuliffe
Skipping useless range: PricewaterhouseCoopers
Skipping useless range: BEA Systems, Inc
Skipping useless range: Heller, Ehrman, White & McAuliffe
Skipping useless range: Twentieth Century Fox
Skipping useless range: Vedder Price Kaufman & Kammholz
Skipping useless range: McDermott Will & Emery
Skipping useless range: Dewey Ballantine
Skipping useless range: PRNewswire
Skipping useless range: Heller, Ehrman, White & McAuliffe
Skipping useless range: Heller, Ehrman, White & McAuliffe
Skipping useless range: Loral Corporation
Skipping useless range: City of San Carlos
Skipping useless range: Heller, Ehrman, White & McAuliffe
Skipping useless range: MAC Publishing L.L.C
Skipping useless range: City of San Carlos
Skipping useless range: BEA Systems, Inc
Skipping useless range: Capgemini Chicago Network
Skipping useless range: Mindjet LLC
Skipping useless range: City of Belmont
Skipping useless range: Town of Hillsborough
Skipping useless range: Town of Atherton
Skipping useless range: City of Brisbane
Skipping useless range: WDIV TV
Skipping useless range: Intergraph
Skipping useless range: CGI Group Inc
Skipping useless range: PUBLIC WORKS GOV. SERV. CANADA
Skipping useless range: GE Canada
Skipping useless range: EDS
Skipping useless range: amcc-ca
Skipping useless range: Compaq Canada Inc
Skipping useless range: studio99-ca
Skipping useless range: City of Kawartha Lakes
Skipping useless range: CGI
Skipping useless range: Avenza Software Marketing
Skipping useless range: TIBCO Finance Inc
Skipping useless range: GSA Computer Services
Skipping useless range: Pollara
Skipping useless range: CGI
Skipping useless range: IBM Canada
Skipping useless range: ibm0425-ca
Skipping useless range: MacMillan Rooke Boeckle
Skipping useless range: Amdocs Canada Managed Services
Skipping useless range: Intergraph Canada Ltd
Skipping useless range: Corel Corporation
Skipping useless range: EDS
Skipping useless range: Government of Ontario RAS
Skipping useless range: emboiran-ca
Skipping useless range: Cryptocard Corporation
Skipping useless range: Hill & Knowlton Ducharme Perron
Skipping useless range: Unigraphics Solutions
Skipping useless range: Discreet Logic Inc
Skipping useless range: NetPD.com
Skipping useless range: Reuters Canada Inc
Skipping useless range: Arter & Hadden
Skipping useless range: Don Law Company
Skipping useless range: Digital Equipment Corp
Skipping useless range: SAIC
Skipping useless range: Sullivan Weinstein & McQuay, P.C
Skipping useless range: Pennwell Publishing
Skipping useless range: Media Net
Skipping useless range: Stonesoft, Inc
Skipping useless range: National Amusements
Skipping useless range: Ghost Music Service
Skipping useless range: Spyrus
Skipping useless range: City of Lowell
Skipping useless range: National Amusements
Skipping useless range: Radview Software
Skipping useless range: IBM Trevoli Systems
Skipping useless range: Streamline Studios
Skipping useless range: Motorola
Skipping useless range: govt0505-ca
Skipping useless range: EDS / Xerox Budget Centre 69696
Skipping useless range: GE MEDICAL SYSTEMS
Skipping useless range: GE Medical Systems
Skipping useless range: Verestar
Skipping useless range: Maginnis Law Office
Skipping useless range: Attorney David S. Nenner
Skipping useless range: Gov Stat
Skipping useless range: HIPAADOCS
Skipping useless range: TRW Automotive
Skipping useless range: Associated Production Music
Skipping useless range: CATO INSTITUTE
Skipping useless range: Independent Feature Project
Skipping useless range: HMS PRODUCTIONS, INC
Skipping useless range: Cinea, Inc
Skipping useless range: Los Angeles County Juvenile Court and Community Schools
Skipping useless range: Midway Home Entertainment.745
Skipping useless range: City Of Tracy
Skipping useless range: Tioga County
Skipping useless range: Nysernet/Touro Law Center
Skipping useless range: Cattaraugus County
Skipping useless range: Cattaraugus County
Skipping useless range: Nysernet/NY State Depart. of State
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: jvc.com
Skipping useless range: ClearBlue Technologies - nyny01 name servers
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: Nysernet/City of Olean
Skipping useless range: ClearBlue Technologies - Syracuse
Skipping useless range: Nysernet/NYC Dep Bur Water Supply & Wastewater Collection
Skipping useless range: National Security Agency
Skipping useless range: Defense Mapping Agency
Skipping useless range: DISA Information Systems Center
Skipping useless range: 694th Intelligence Group
Skipping useless range: Defense Mapping Agency
Skipping useless range: Manatee County Government
Skipping useless range: Indian River County Government
Skipping useless range: Florida Department of Banking and Finance
Skipping useless range: Florida Community Network Initiative
Skipping useless range: Hillsborough County Board of County Commissions
Skipping useless range: Department of Highway Safety and Motor Vehicles
Skipping useless range: Florida Department of State
Skipping useless range: City of Plant City
Skipping useless range: Florida Department of State
Skipping useless range: Greater Orlando Aviation Authority
Skipping useless range: Dept. of Military Affairs
Skipping useless range: Division of Administrative Hearings
Skipping useless range: Florida Dept. of Labor, Division of Jobs and Benefits
Skipping useless range: Florida Dept. of Highway Safety and Motor Vehicles
Skipping useless range: City of Sarasota
Skipping useless range: Florida Housing Finance Corporation
Skipping useless range: EDS Canada Inc
Skipping useless range: El Dorado County Office of Education
Skipping useless range: Sega Soft
Skipping useless range: Data Quest Software, L L C
Skipping useless range: State Department Federal Credit Union
Skipping useless range: Hughes Network Systems / Reseller
Skipping useless range: Multimedia 2000 / Multicom Publishing
Skipping useless range: Trend Micro
Skipping useless range: Nextpoint, Inc
Skipping useless range: Phyber Communications - Possible MediaDefender
Skipping useless range: Sample Digital Holdings LLC
Skipping useless range: Phyber Communications - MediaDefender
Skipping useless range: whittakercorp.com
Skipping useless range: Creative Thought, Inc
Skipping useless range: Creative Thought, Inc
Skipping useless range: MediaDefender
Skipping useless range: Screen Actors Guild
Skipping useless range: Aviant Information
Skipping useless range: Aviant Information
Skipping useless range: National Immigration Law Center
Skipping useless range: Tri-Tech Entertainment
Skipping useless range: Aviant Information
Skipping useless range: Regard Systems Integrators
Skipping useless range: Mediadefender
Skipping useless range: Department of Juvenile Justice
Skipping useless range: Philips Hager and North Investment Management Ltd
Skipping useless range: Eclipse Entertainment
Skipping useless range: Precision Camera
Skipping useless range: Texas Legislative Service
Skipping useless range: Onramp Web
Skipping useless range: Lackland Air Force Base
Skipping useless range: Paramount.Theater
Skipping useless range: Republican Party of Texas
Skipping useless range: Innovus Multimedia Inc
Skipping useless range: Bay T
Skipping useless range: Sacramento County Bar Association (SACBAR-DOM)
Skipping useless range: Logicon (LRDA-DOM)
Skipping useless range: American.Zoetrope
Skipping useless range: City of Newark
Skipping useless range: City Of Tracy
Skipping useless range: Publishers Group West
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: NOAA at Nauticus
Skipping useless range: Discordia-P2P scammers
Skipping useless range: Scopelitis, Garvin, Light & Hanson
Skipping useless range: KTBS
Skipping useless range: California Democratic Party
Skipping useless range: Aircraft Engineering Corporation
Skipping useless range: CreatRoute for customer Northrop Grumman
Skipping useless range: ACS BPS
Skipping useless range: Sportstation New Media Inc
Skipping useless range: CADENCE DESIGN SYSTEMS
Skipping useless range: GE Asset Management
Skipping useless range: SOUTHERN-LIGHT-LLC-Mobile.so-2-3-0.ar4.ATL1.gblx.net
Skipping useless range: CMP MEDIA LLC
Skipping useless range: John Teter Atty
Skipping useless range: Compaq Computer Inc
Skipping useless range: Apple Computer, Inc. UU-208-216-53 (NET-208-216-53-0-1)
Skipping useless range: Apple Computer, Inc. UU-208-216-54 (NET-208-216-54-0-1)
Skipping useless range: Apple Computer, Inc. UU-208-216-55 (NET-208-216-55-0-1)
Skipping useless range: Picture Works
Skipping useless range: Verestar
Skipping useless range: SecurityMinded Technologies LLC
Skipping useless range: SecurityMinded Technologies LLC
Skipping useless range: SecurityMinded Technologies LLC
Skipping useless range: Myriad Network
Skipping useless range: InfoRelay Online Systems, Inc
Skipping useless range: Eidos Interactive, Inc
Skipping useless range: Gabriel Productions
Skipping useless range: Todd Street Productions
Skipping useless range: Bigfoot Interactive
Skipping useless range: SEG Travel/Sony Travel
Skipping useless range: Fund for The City of New York
Skipping useless range: SEG Travel/Sony Travel
Skipping useless range: Silverman, Sclar, Byrne, Shin & Byrne P.C
Skipping useless range: Worldwide Security Network
Skipping useless range: NYC Police Museum
Skipping useless range: Palisades Technology Partners
Skipping useless range: EMI Music Publishing
Skipping useless range: BET Interactive, LLC
Skipping useless range: Massive Incorporated
Skipping useless range: CMJ Network, Inc
Skipping useless range: Fund for The City of New York
Skipping useless range: Gabriel Productions
Skipping useless range: Eidos Interactive, Inc
Skipping useless range: Facetime Communications
Skipping useless range: City of Campbell
Skipping useless range: CDM Software Solutions, Inc
Skipping useless range: Macrovision Corporation
Skipping useless range: Macrovision Corporation
Skipping useless range: Macrovision Corporation
Skipping useless range: Macrovision Corporation
Skipping useless range: Autodesk - Verizon LPS
Skipping useless range: Practising Law Institute
Skipping useless range: ACS State and Local Government Solutions, Inc
Skipping useless range: MIKE MILLIGAN ATTORNEY AT LAW
Skipping useless range: ISTUDIO CANADA INC
Skipping useless range: KNOWLEDGE BROADCASTING.COM
Skipping useless range: CBS Marketwatch.com
Skipping useless range: Kaufman Astoria Studios, Inc
Skipping useless range: Entertainment Brokers Intl
Skipping useless range: Apollo Publishing LLC
Skipping useless range: Virtual Broadcasting Information Center (VBIC) LLC
Skipping useless range: Office of the Chapter 13 Trustee
Skipping useless range: LAW OFFICES OF WINDLE TURLEY, PC
Skipping useless range: Scour Inc
Skipping useless range: Winstar OTA Test Order- OWB
Skipping useless range: MOLINE DISPATCH PUBLISHING COMPANY
Skipping useless range: 4AM Productions, Inc
Skipping useless range: DreamMaker Studios, Inc
Skipping useless range: Public Strategies, Inc
Skipping useless range: Jain Studios Limited
Skipping useless range: Craig Productions
Skipping useless range: Direct Information
Skipping useless range: Plaza Productions B. V
Skipping useless range: Z/H Publishing Inc
Skipping useless range: WebEstudio.com
Skipping useless range: Coffee Cup Software
Skipping useless range: Coffee Cup Software
Skipping useless range: Direct Information
Skipping useless range: SC3M SA
Skipping useless range: HBOA.com Inc
Skipping useless range: DreamMaker Studios, Inc
Skipping useless range: Direct Information
Skipping useless range: Musicsend
Skipping useless range: SC3M SA
Skipping useless range: Direct Information
Skipping useless range: SC3M SA
Skipping useless range: Public Strategies, Inc
Skipping useless range: GMD Studios
Skipping useless range: ichat, inc
Skipping useless range: ichat, inc
Skipping useless range: Direct Information Pvt. Ltd
Skipping useless range: GMD Studios
Skipping useless range: InfoLink
Skipping useless range: Public Strategies, Inc
Skipping useless range: First Choice Publishing
Skipping useless range: Coffee Cup Software
Skipping useless range: Coffee Cup Software
Skipping useless range: ichat, inc
Skipping useless range: First Choice Publishing
Skipping useless range: Direct Information Pvt. Ltd
Skipping useless range: ichat, inc
Skipping useless range: ichat, inc
Skipping useless range: Purple Monkey Studios
Skipping useless range: Purple Monkey Studios
Skipping useless range: Segment Publishing
Skipping useless range: Toolbox Studios, Inc
Skipping useless range: Enhanced Software Technology
Skipping useless range: Digital Commerce Solutions
Skipping useless range: First Choice Publishing
Skipping useless range: Impaq Computers Corp
Skipping useless range: MM Productions
Skipping useless range: The Aspen Institute
Skipping useless range: CRIA, Inc
Skipping useless range: Dennis Publishing
Skipping useless range: DalePro Audio
Skipping useless range: F2MediaCorp
Merged range 'Verestar', with range 'Verestar'
Skipping useless range: Shanley & Fisher, P.C
Skipping useless range: Prudent Publishing Company
Skipping useless range: Santa Cruz Games
Skipping useless range: L A Studios
Skipping useless range: California Business Bureau
Skipping useless range: City of Huntington Park
Skipping useless range: Illinois State Toll Highway Authority
Skipping useless range: L A County Department Of Children And Family Services
Skipping useless range: Internet Security Alliance, Llc
Skipping useless range: Motiv Films
Skipping useless range: U S Customs Service
Skipping useless range: Whitman, Requardt And Associates L L P
Skipping useless range: U S Army Corps Of Engineers
Skipping useless range: Law Offices Of Harlee Levy
Skipping useless range: Hogan and Hartson, L L P / Washington, D C
Skipping useless range: Science Applications International Corporation
Skipping useless range: Laemmle Theatres
Skipping useless range: Veritasiti Corporation
Skipping useless range: Blur Studio / Referral Rep
Skipping useless range: The Chase Law Group
Skipping useless range: City of Las Vegas
Skipping useless range: SAIC - Technology Research Group
Skipping useless range: Northeast MD Waste Disposal Authority
Skipping useless range: American Inns of Court Foundation
Skipping useless range: Keane Contracting
Skipping useless range: Jones Walker Law Firm
Skipping useless range: SAIC - Technology Research Group
Skipping useless range: National Womenss Law Center
Skipping useless range: MediaDefender
Skipping useless range: Black Ops Entertainment, LLC
Skipping useless range: Business Executives for National Security
Skipping useless range: Vasco Data Security
Skipping useless range: engineering Animation inc
Skipping useless range: Xulu Entertainment
Skipping useless range: Hughes Electronic Commerce
Skipping useless range: Scientific Research Corporation
Skipping useless range: Holland & Knight LLP
Skipping useless range: Atlanta Bar Association
Skipping useless range: International Human Resource Development (IHRDC)
Skipping useless range: American Intelligent Systems
Skipping useless range: American Intelligent Systems
Skipping useless range: American Broadband Productions
Skipping useless range: American Intelligent Systems
Skipping useless range: Law Offices of Michael Pinze
Skipping useless range: WINSTAR DIRECT
Skipping useless range: VASCO Data Security Inc
Skipping useless range: American Intelligent Systems
Skipping useless range: Marines Memorial Club
Skipping useless range: Aramat Productions Inc
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar routes>
Skipping useless range: Inter-Connect Ltd
Skipping useless range: Ernst & Young
Skipping useless range: Verestar
Skipping useless range: Bfore Productions
Skipping useless range: PacificNet
Skipping useless range: Reality Checks Studios
Skipping useless range: Legal Enterprises
Skipping useless range: Trauma Records
Skipping useless range: ZIDE ENTERNTAINMENT
Skipping useless range: PacificNet
Skipping useless range: STARGATE FILMS
Skipping useless range: CRYSTAL SKY COMMUNICATIONS
Skipping useless range: NETSENTRY - Net Sentry Corp
Skipping useless range: EDS Canada / ACSYS Technologies
Skipping useless range: Drinka, Levine & Masson, S.C
Skipping useless range: Manhattan Software
Skipping useless range: Rayburn Music Co., Inc
Skipping useless range: Conquest Boeing
Skipping useless range: Montgomery Publishing
Skipping useless range: Ernst & Young
Skipping useless range: gov1024-ca
Skipping useless range: Law Offices of Robert Dimino
Skipping useless range: Wild, Carey and Fife
Skipping useless range: Galarneau & Sinn, Ltd
Skipping useless range: Searchlight.Group
Skipping useless range: Web Side Story, Inc
Skipping useless range: CAIDA MFN
Skipping useless range: North Central Florida Regional Planning Council
Skipping useless range: Nagravision
Merged range 'Logitech DVB sites', with range 'Logitech DVB sites'
Skipping useless range: AAPT Ltd - CISCO LAB (140943)
Skipping useless range: AAPT Ltd - CISCO LAB (140942)
Skipping useless range: AAPT Ltd - CISCO LAB (140944)
Skipping useless range: Universal Press
Skipping useless range: BENTLEY SYSTEMS PTY LTD
Skipping useless range: Bayside City Council
Skipping useless range: jungwang police school
Skipping useless range: Environment Management Corporation
Skipping useless range: DONGGU OFFICE OF INCHON METROPOLITAN
Skipping useless range: MINISTRY OF JUSTICE INCHEONG PROBATION PLACE
Skipping useless range: POLICE COMPREHENSIVE ACADEMY
Skipping useless range: YANGPYONG COUNTRY OFFICE
Skipping useless range: TAEBAEK POST OFFICE PLAZA
Skipping useless range: Hoengsung County Office
Skipping useless range: ICHEN POST OFFICE
Skipping useless range: SEOINCHEON POST OFFICE
Skipping useless range: HASUNG WELFARE HALL
Skipping useless range: Ponghwa County Hall
Skipping useless range: SEOUL METROPOLITAN COUNCIL
Skipping useless range: eun Currency Co
Skipping useless range: Yongcheon City Hall
Skipping useless range: ARMY7557
Skipping useless range: ARMY9393
Skipping useless range: ARMY2632
Skipping useless range: Namwon City Hall
Skipping useless range: (ju)kyocharo
Skipping useless range: Sogu Office Inchon Metropolitan City
Skipping useless range: KIMPO CITY HOLL GOCHUN TOWNSHIP OFFICE
Skipping useless range: KIMPO CITY HOLL DAEGOK TOWNSHIP OFFICE
Skipping useless range: KIMPO CITY HOLL YANGCHON TOWNSHIP OFFICE
Skipping useless range: KIMPO CITY HOLL WOLGOK TOWNSHIP OFFICE
Skipping useless range: Shiheung City Hall
Skipping useless range: MASAN CITY HALL
Skipping useless range: Kwangan Bridge Management Authority
Skipping useless range: Hongsung County Office
Skipping useless range: CHEJU CITY HALL
Skipping useless range: Wonju City Hall
Skipping useless range: Seoul Metropolitan Police Agency
Skipping useless range: DEFENCE PROCUREMENT AGENCY
Skipping useless range: Naju City Hall
Skipping useless range: KIMCHEON CITY HALL
Skipping useless range: Jung-gu District Office Daegu Metropolitan City
Skipping useless range: Dreminternetgamestation
Skipping useless range: DoDDS(APO.AP 96502-0005)
Skipping useless range: SUNGDO FILM TRADING CO., LTD
Skipping useless range: CGI
Skipping useless range: EBS(Korea Educational Broadcasting System)
Merged range 'Department of Industry and Tourism', with range 'Department of Industry and Tourism'
Merged range 'Australian Communications and Media Authority', with range 'Department of Industry and Tourism'
Skipping useless range: Vietnam Television Station Office
Skipping useless range: The United States Agency for International Develo
Skipping useless range: Fuji Xerox Representative Office Vietnam
Skipping useless range: Daewoo hanel Electronics Co., Ltd
Merged range 'Verestar', with range 'Interpacket Networks (A Verestar Company)'
Skipping useless range: Medien System Haus internal network
Skipping useless range: subnet for SAKHALIN DUMA
Skipping useless range: MPR Film und Fernseh Produktion GmbH, Muenchen
Skipping useless range: Rechtsanwalt Dr. Joerg Weigell, Muenchen
Skipping useless range: SPX - Valley Forge T.I.S, Garching-Hochbrueck
Skipping useless range: Patentanwaelte Wallach & Partner, Muenchen
Skipping useless range: Oracle Deutschland GmbH, Muenchen
Skipping useless range: Min. of Higher Education
Skipping useless range: Security Forces Hospital
Skipping useless range: Internet Service Unit, KACST
Skipping useless range: King Abdulaziz City for Science and Technology
Skipping useless range: Commercial private establishment
Skipping useless range: King Abdulaziz City for Science and Technology
Skipping useless range: GDTA
Skipping useless range: GDTA - second block
Skipping useless range: Amaz International company
Skipping useless range: Communication and Information Technology Commission
Skipping useless range: Fraunhofer IESE Institut Experimentelles Software
Skipping useless range: Verestar
Skipping useless range: Alshiukh municipality center located in Hebron ,
Skipping useless range: amen amm is governet Co called:amen amm
Skipping useless range: Lebanese Ministry of Finance
Skipping useless range: Wunderman Cato Johnson
Skipping useless range: Ente Nazionale ACLI Istruzione Professionale
Skipping useless range: Landeshauptstadt Hannover
Skipping useless range: Landeshauptstadt Hannover
Skipping useless range: Landeshauptstadt Hannover
Skipping useless range: DTS DIGITAL TEKNIK SAN.LTD.STI
Skipping useless range: A.F.M. ULUSLARARASI FILM PROD.A.S
Skipping useless range: ODEON COMPACT DISC MUZIK SAN AS
Skipping useless range: ALTINCI DUYU REKLAM FILM.TIC.A.S
Skipping useless range: OFSET FILM VE MATBAA.SAN.A.S
Skipping useless range: Ministry of Foreign Affairs
Skipping useless range: Ministry of Justice
Skipping useless range: Ministry of Culture
Skipping useless range: State Data Inspection
Skipping useless range: Court House Agency
Skipping useless range: Teici National Park
Skipping useless range: THE LATVIAN AGRICULTURAL ADVISORY AND TRAINING CE
Skipping useless range: PRICE-WATER-OMAN
Skipping useless range: SCHLUMBERGER-TWO-OMAN
Merged range 'ZUXXEZ Entertainment AG', with range 'ZUXXEZ Entertainment AG'
Skipping useless range: LINA TV Productions
Skipping useless range: Ministry of Interiors
Skipping useless range: Prime Minister Office
Skipping useless range: Jericho Municipality
Skipping useless range: Intertech Productions
Skipping useless range: Palestinian INterior Ministry special Fo
Skipping useless range: Bailasan Productions
Skipping useless range: Nablus Municipality
Skipping useless range: DCA Judicial Portal
Skipping useless range: Kanzlei Henniges
Skipping useless range: Agentur fuer Arbeit Nuernberg ARGE
Skipping useless range: Naacher Consulting GmbH
Skipping useless range: Kayenburg Rechtsanwalt
Skipping useless range: Ministero della Difesa IT
Skipping useless range: INTEL LAAYOUNE
Skipping useless range: Ministere de la Prévision Economique et du Plan
Skipping useless range: Ministere de la jennesse et des sport Rabat-Morocc
Skipping useless range: Labo de police
Skipping useless range: Ubi Soft
Skipping useless range: Ministere des affaires generales et du gouvernemen
Skipping useless range: Exactsoftware Maroc
Skipping useless range: Exactsoftware Maroc
Skipping useless range: STE Alston (Cegelec) à Casa
Skipping useless range: Ministere des PTT
Skipping useless range: SNEP Ã Mohamedia
Skipping useless range: STE SIEMENS à Casa
Skipping useless range: geschichte.wasserschutzpolizei.berlin.de.Schlund.P
Skipping useless range: FR-RAEI-FRANCE-TELECOM--USEI-LB_INTERNET
Skipping useless range: FR-RAEI-HEWLETT-PACKARD-FRANCE-LB_INTERNET
Skipping useless range: FR-RAEI-FRANCE-TELECOM-UIE-NORD-PAS-DE-LB_INTERNET
Skipping useless range: LEXMARK INTERNATIONAL SAS
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: ANIA - Associazione Nazionale fra le Imprese Assi
Skipping useless range: Einstein Multimedia Productions S.r.l
Skipping useless range: Toshiba Europe S.p.A
Skipping useless range: Rogue Wave Software S.r.l
Skipping useless range: Software Consulting S.r.l
Skipping useless range: Ministero dell'Ambiente e della Tutela del Territ
Skipping useless range: Red Sheriff S.r.l
Skipping useless range: Walnut Tree Productions S.r.l
Skipping useless range: M.S.C. Software
Skipping useless range: Trevisan & Cuonzo Avvocati
Skipping useless range: Ente Nazionale Austriaco Per Il Turismo
Skipping useless range: Comune di Militello Val Catania Via Umberto Pozzo
Skipping useless range: EADS-ATRIUM
Skipping useless range: Veritas.Software.FR
Skipping useless range: HEWLETT-PACKARD
Skipping useless range: HEWLETT.PACKARD.FR
Skipping useless range: Landesamt.fuer.Informationstechnik.Hamburg
Skipping useless range: Rechtsanwaelte Schoenfeld und Luntz
Skipping useless range: Siemens Business Services Sistem Hizmetleri A.S
Skipping useless range: Cinestar Rental AB
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-DIH-FW-OPENX-OLE
Skipping useless range: FR-RAEI-FRANCE-TELECOM--UIA-FWVPN
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-RAEI
Skipping useless range: GI - Customer Interconnexion With RAEI B
Skipping useless range: GI - Customer Interconnexion With RAEI B
Skipping useless range: FR-RAEI-SAMSUNG-ELECTRONICS-FRANCE-FW-OPENX-OLE
Skipping useless range: FR-RAEI-SUN-MICROSYSTEMS-FRANCE-FW-OPENX-OLE
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-DIH-FW-OPENX-OLE
Skipping useless range: FR-RAEI-FRANCE-TELECOM-CEX-TRANSPAC-RAEI
Skipping useless range: FR-RAEI-FRANCE-TELECOM-TRANSPAC-DIH-FW-OPENX-OLE
Skipping useless range: INTERSOFT AG
Skipping useless range: Network of ChoicePoint Limited
Skipping useless range: Network of ChoicePoint Limited
Skipping useless range: Network of LIM EDS UK
Skipping useless range: Network of LIM - EDS UK (AON)
Skipping useless range: Network of IBM NOS
Skipping useless range: Network of United Business Media Group
Skipping useless range: Network of Thomsons
Skipping useless range: Network of FNAC
Skipping useless range: Network of Sony
Skipping useless range: Network of Apple Computers
Skipping useless range: Network of IBM Forum
Skipping useless range: Network of Mad Catz
Skipping useless range: Network of Bundesministerium Auswrtige Angelegenheiten
Skipping useless range: Network of IBM Sweden HQ
Skipping useless range: www.softland.iq.pl
Skipping useless range: M.G.M. Srl
Skipping useless range: Logotec Engineering
Skipping useless range: Centro Servizi E Ricerche IT
Skipping useless range: MEDIA DIRECT S.R.L
Skipping useless range: IST. REG. DI RICERCA SPERIMENTALE IT
Skipping useless range: Sintesi & Ricerca IT
Skipping useless range: IBM ITALIA SPA
Skipping useless range: I.R.E
Skipping useless range: Centro Ricerche Marine IT
Skipping useless range: STUDIOALFA SNC DEL BIANCO F. & RICCI A
Skipping useless range: IPASS.P.A
Skipping useless range: Advokatfirman Lindberg & Saxon HB
Skipping useless range: EURO I Fernsehproduktions- und Betriebs AG
Skipping useless range: Panasonic Austria HandelsgesmbH
Skipping useless range: SAS Institute Software GmbH
Skipping useless range: EMI Compact Disc (Holland) BV
Skipping useless range: Legal & General Nederland
Skipping useless range: Legal & General Nederland
Skipping useless range: UNISYS Oesterreich
Skipping useless range: Advokatfirmaet Hjelseth & Kilstad DA
Skipping useless range: EDS PA - CGI. Server Hosting DMZ
Skipping useless range: EDS PA - CGI. Server Hosting DMZ
Skipping useless range: Ministero della Giustizia
Skipping useless range: Ministero del Lavoro e della Previdenza Sociale
Skipping useless range: Avvocatura Generale dello Stato
Skipping useless range: Istituto Nazionale di Previdenza Dipendenti IT
Skipping useless range: Ministero della Giustizia
Skipping useless range: Ministero del Tesoro IT
Skipping useless range: Istituto Nazionale della Previdenza Sociale (INPS)
Skipping useless range: Istituto Nazionale della Previdenza Sociale (INPS
Skipping useless range: Ministero del Lavoro e della Previdenza Sociale IT
Skipping useless range: National Institute of Agricultural Economics IT
Skipping useless range: Ministero dei lavori Pubblici IT
Skipping useless range: Ministero Industria IT
Skipping useless range: Ministero della Sanita'
Skipping useless range: CORTE DEI CONTI IT
Skipping useless range: Ministero Attività Produttive
Skipping useless range: Ministero Della Difesa
Skipping useless range: Autorita' per l'Informatica nella Pubblica Amminis
Skipping useless range: Autorita' per l'Informatica nella Pubblica Amminis
Skipping useless range: Governo Italiano
Skipping useless range: Scuola Superiore della Pubblica Amministrazione
Skipping useless range: MINISTERO DELLA GIUSTIZIA - Pro. Tel
Skipping useless range: Ministero Infrastrutture e Trasporti(MINT)
Skipping useless range: www.policja.dzialdowo.com.pl
Skipping useless range: STUDIO BENVENUTI S.N.C
Skipping useless range: Aeronautica Militare
Skipping useless range: Ambasciata Greca
Skipping useless range: STUDIO COMMERCIALE VIGANO' - POZZOLI - BRAMBILLA
Skipping useless range: EFFE STUDIO SERVICE SRL
Skipping useless range: CONSIGLIO NAZIONALE DEI GEOLOGI
Skipping useless range: JOCKS MUSIC SRL
Skipping useless range: Det Norske Veritas
Skipping useless range: SOVINTEL-Piramid-Home-video-NET
Skipping useless range: Unizeto Technologies S.A
Skipping useless range: Unizeto Technologies S.A
Skipping useless range: milliyetfw.milliyet.com.tr
Skipping useless range: milliyet.com
Skipping useless range: kurumsal.milliyet.com.tr
Skipping useless range: milliyet.com.tr
Skipping useless range: yarisma.milliyet.com.tr
Skipping useless range: BLOCKBUSTER ITALIA S.P.A
Skipping useless range: IBM ITALIA S.P.A
Skipping useless range: FILMA SRL
Skipping useless range: AMBASCIATA DEL MESSICO
Skipping useless range: The Pentagon
Skipping useless range: Kallisto Productions, Inc
Skipping useless range: DG Entertainment
Skipping useless range: Resolute Partners
Skipping useless range: DKC Entertainment
Skipping useless range: Involve Media
Skipping useless range: DKC Entertainment
Skipping useless range: Grand Media
Skipping useless range: DES Productions
Skipping useless range: The Education Channel International Ltd
Skipping useless range: Conectiva Consultoria e Desenvolvimento de Sistemas
Skipping useless range: City of Post Falls
Skipping useless range: Axcelerant
Skipping useless range: msf-law.com
Skipping useless range: Ernst & Young LLP
Skipping useless range: Ernst & Young LLP
Skipping useless range: Brown Beattie O\\
Skipping useless range: Corus Entertainment/CFPL Radio
Skipping useless range: Polar Interactive
Skipping useless range: First MediaWorks
Skipping useless range: On Tour Multimedia Inc
Skipping useless range: Solitude Systems Software
Skipping useless range: Interactive Media Advertising Group, Inc
Skipping useless range: Rising Tide Productions
Skipping useless range: Electronic Data Systems
Skipping useless range: City of Bellingham
Skipping useless range: IMusicNetworks.com, Inc
Skipping useless range: Bittorrent fakes
Skipping useless range: City of Bellingham
Skipping useless range: Mindfly, Inc
Skipping useless range: Connexion by Boeing Aviation Test Group
Skipping useless range: Connexion by Boeing Commercial Airline Customer
Skipping useless range: Connexion by Boeing Commercial Operations
Skipping useless range: pref.email.ascap.com
Skipping useless range: CMGI
Skipping useless range: Motorola
Skipping useless range: Information Resource Systems
Skipping useless range: Media Process Group
Skipping useless range: Centura Software
Skipping useless range: Oak Hill Capital - Fortworth
Skipping useless range: FINNEGAN HENDERSON
Skipping useless range: lshllp.com
Skipping useless range: Government of the NWT (Lutsel K
Skipping useless range: nexiconinc.com
Skipping useless range: AAA Software
Skipping useless range: False Idol Productions INC
Skipping useless range: Cool Films
Skipping useless range: Modular Production Equipment Inc
Skipping useless range: Entrust Inc
Skipping useless range: City of Seabrook
Skipping useless range: Arbol Media
Skipping useless range: Zuill Brothers Software, Inc
Skipping useless range: Creative Media Productions
Skipping useless range: Veritas Software
Skipping useless range: Hughes Network Systems / Reseller
Skipping useless range: Musictoday LLC
Skipping useless range: Panamsat Chantilly
Skipping useless range: A T Entertainment, Inc
Skipping useless range: Amper, Politziner and Mattia, P.C
Skipping useless range: Southern Company Legal Department
Skipping useless range: Hoku Entertainment - Formely Internet Tv Networks
Skipping useless range: Bang Productions
Skipping useless range: Broadcast Studios
Skipping useless range: dreamcatcherinteractive.com
Skipping useless range: Disney Coporate
Skipping useless range: Alchemedia
Skipping useless range: Knockout Productions
Skipping useless range: Omega Studios, Inc
Skipping useless range: Dallas Cowboys Merchandise
Skipping useless range: Pittsylvania County Government-nDanville
Skipping useless range: The M Group
Skipping useless range: Thought Convergence, Inc
Skipping useless range: The Moschovitis Group
Skipping useless range: Web Studio (000000)
Skipping useless range: Web Studio (000000)
Skipping useless range: CDP Entertainment (000000)
Skipping useless range: Entertainmentjob.com (000000)
Skipping useless range: SideSmile Productions (000000)
Skipping useless range: Unisys-Rosville
Skipping useless range: www.webnmedia.com
Skipping useless range: Analysts International
Skipping useless range: ARINC
Skipping useless range: Law Offices of John R. Zarzynski
Skipping useless range: Harris Wiltshire & Grannis LLP
Skipping useless range: Tarlow, Breed, Hart, Murphy & Rodgers
Skipping useless range: Siebel Systems Accounts Payable
Skipping useless range: Atlanta Legal Services
Skipping useless range: WHITMONT LEGAL COPYING
Skipping useless range: Law Office of Robert Harrington
Skipping useless range: Burke, Warren, MacKay & Serritella, P.C
Skipping useless range: Burke, Warren, MacKay & Serritella, P.C
Skipping useless range: Quantitive Software Management, Inc
Skipping useless range: LegaLink Manhattan
Skipping useless range: JJ Software
Skipping useless range: Hilton Huntington Hotel
Skipping useless range: Raytheon-Range Systems
Skipping useless range: Cinemark USA, Inc..256844
Skipping useless range: Intraware, Inc
Skipping useless range: Prism Software
Skipping useless range: Cranston Software
Skipping useless range: Trimedia, Inc
Skipping useless range: Third Eye Media
Skipping useless range: Legal Communications Corp
Skipping useless range: Maddock, Henson, Haberstroh, P.C
Skipping useless range: U.S. Court of Appeals (7th Circuit)
Skipping useless range: AVI Media, Inc
Skipping useless range: B Exquisite Productions
Skipping useless range: Caymen Islands Dept. of Tourism - MHarrigan
Skipping useless range: Caymen Islands Dept. of Tourism - SRogers
Skipping useless range: Adaptec, Inc
Skipping useless range: Caymen Islands Dept. of Tourism - SRogers
Skipping useless range: National Association of Manufacturers - Wilshire
Skipping useless range: National Association of Manufacturers - Route 46
Skipping useless range: National Association of Manufacturers - Market Str
Skipping useless range: National Association of Manufacturers - East Seven
Skipping useless range: Autonomy Systems LLC
Skipping useless range: CSTV Online Inc
Skipping useless range: State of WA Office of Financial Mgmt. Epermit.org
Skipping useless range: WA State Bar Assn. Continuing Legal Education
Skipping useless range: Fox Sports
Skipping useless range: The NC Dept of Health and Huma
Skipping useless range: Nashville Chamber of Commerce
Skipping useless range: Hammock Publishing
Skipping useless range: BMI
Skipping useless range: MusicYo.com, Inc
Skipping useless range: Nashville Chamber of Commerce
Skipping useless range: Motricity, Inc
Skipping useless range: Global Anti-Piracy Systems
Skipping useless range: Play Fair Entertainment, LLC
Skipping useless range: Latis Networks, Inc
Skipping useless range: Latis Networks, Inc
Skipping useless range: Universal Company
Skipping useless range: Community Action Agency
Skipping useless range: James Keane Co
Skipping useless range: International Law Institute
Skipping useless range: Voice of America
Skipping useless range: EDS Innovations
Skipping useless range: IBM Canada Ltd
Skipping useless range: INTRACOM CORPORATION
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar Networks LEUK
Skipping useless range: Verestar
Skipping useless range: VereStar Networks BRW
Skipping useless range: SES-Americom Network
Skipping useless range: VereStar Networks BRW
Skipping useless range: VereStar Networking Consumers
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar Network
Skipping useless range: Spokane Chamber of Commerce
Skipping useless range: Lon Gibby Productions, Inc
Skipping useless range: Cowles Publishing
Skipping useless range: PROSECUTING ATTORNEYS COUNCIL OF GEORGIA
Skipping useless range: Khmer Broadcasting Network Inc
Skipping useless range: Flying Tiger Development
Skipping useless range: The Yocca Law Firm, LLP
Skipping useless range: Paramount Disc
Skipping useless range: Certifion Corp
Skipping useless range: eStream, Inc
Skipping useless range: Jerry Bruckheimer Films
Skipping useless range: Ntreev USA Inc
Skipping useless range: Law Offices of Mark A. Gallagher
Skipping useless range: General Dynamics
Skipping useless range: In-Fusio
Skipping useless range: City Of Newport Beach
Skipping useless range: Mitsubishi Electronics America, Inc
Skipping useless range: Eltman Eltman & Cooper
Skipping useless range: eStream, Inc
Skipping useless range: Mahaffey & Associates
Skipping useless range: Knobbe, Martens, Olson, Bear
Skipping useless range: Shimokaji & Associates
Skipping useless range: TMC Communities
Skipping useless range: Erwin & Johnson
Skipping useless range: Pix Video, Film & Multimedia
Skipping useless range: Hollywood Music, Inc
Skipping useless range: Scott & Whitehead
Skipping useless range: Studio Exchange
Skipping useless range: Xroads
Skipping useless range: Newport Beach Film Festival
Skipping useless range: K2 Network
Skipping useless range: Dewit Law Offices
Skipping useless range: Mitsubishi Digital Electronics of America
Skipping useless range: Kutak Rock LLP
Skipping useless range: Arlon Adhesives and Films
Skipping useless range: iPass-Germany-colo Class-C
Skipping useless range: ROUTE OBJECT FOR iPass
Skipping useless range: City of Portland
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Compaq
Skipping useless range: Compaq
Skipping useless range: Compaq
Skipping useless range: VereStar Networking Consumers
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar Link
Skipping useless range: Verestar
Skipping useless range: Verestar
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar (addition)
Skipping useless range: Verestar (addition)
Skipping useless range: Skyweb Technologies Ltd ((ITAA Member))
Skipping useless range: Riefberg, Smart, Donohue and NeJame PC
Skipping useless range: Gemeindeverwaltung Nuesttal
Skipping useless range: Alfred Publishing Verlags GmbH
Skipping useless range: Bundes.Pensions.Service
Skipping useless range: Jaff und Kollegen Rechtsanwaelte
Skipping useless range: KBR
Skipping useless range: Stadtverwaltung Forst (Lausitz)
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Muensingen
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Bad Urach
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Kitzingen
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Neumuenster
Skipping useless range: Telekontor GmbH
Skipping useless range: Landratsamt Rhein-Neckar-Kreis
Skipping useless range: Hotel Hilton Garden Inn
Skipping useless range: WVG GFGH GmbH
Skipping useless range: ITZBw
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Hechingen
Skipping useless range: BVI Bundesverband Deutscher Investment Gesellscha
Skipping useless range: Anschutz Entertainment Group Development
Skipping useless range: Army Recreation Machine
Skipping useless range: AdEvents Cross Media AG
Skipping useless range: Customs Support
Skipping useless range: Vodafone Pilotentwicklung GmbH
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Duisburg
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Bad Wildunge
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Bad Arolsen
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Zell
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Osterburken
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Jever
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Varel
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Loerrach
Skipping useless range: CineStar - der Filmpalast in Rostock
Skipping useless range: Kino -Schauburg-
Skipping useless range: Agentur fuer Arbeit Saarbruecken ARGE
Skipping useless range: adp engineering GmbH
Skipping useless range: SABOCON GmbH
Skipping useless range: STUDIO MONDIALE
Skipping useless range: Military Car Sales GmbH
Skipping useless range: Army Recreation
Skipping useless range: Bundesanstalt fuer Arbeit Arbeitsamt Horb
Skipping useless range: Securitas Systems GmH
Skipping useless range: TRW/Lucas Automotive GmbH
Skipping useless range: T-Systems International GmbH fuer SPIEGEL Verlag
Skipping useless range: Nebel Verlag GmbH
Skipping useless range: ESM Software GmbH
Skipping useless range: Media Corporation One GmbH
Skipping useless range: Innenministerium NRW
Skipping useless range: Observer Argus Media GmbH
Skipping useless range: Princess Royal Barracks
Skipping useless range: Agentur fuer Arbeit Neuruppin ARGE
Skipping useless range: Agentur fuer Arbeit Jena ARGE
Skipping useless range: Hans Thomann Musikhaus
Skipping useless range: Agentur fuer Arbeit Kiel ARGE
Skipping useless range: Lucent Technology, Portmaster RAS
Skipping useless range: Law Consultation Firm
Skipping useless range: Robert-MUSIC.UK
Skipping useless range: COMUNEDIFICARAZZI
Skipping useless range: COMUNEDISIRACUSA
Skipping useless range: COMUNEDIRAVANUSA
Skipping useless range: COMUNEDIRAVANUSA
Skipping useless range: Priority Telecom
Skipping useless range: Modern Electronics
Skipping useless range: Toshiba Europe GmbH
Skipping useless range: Wincor-Nixdorf
Skipping useless range: Fujitsu Siemens Computers Paderborn Germany
Skipping useless range: Wincor-Nixdorf
Skipping useless range: Fujitsu Siemens Computers Germany
Skipping useless range: Fujitsu Siemens Computers Germany
Skipping useless range: Fujitsu Siemens Computers Munich Germany
Skipping useless range: Echelon bv consutancy & network services
Skipping useless range: Ministry of Finance of Bulgaria, headquarters
Skipping useless range: Wave LAN City Hall Vienna
Skipping useless range: www.zapa.org.pl
Skipping useless range: SDSL: Cineflix Productions UK
Skipping useless range: Schlund + Partner AG United Statesfakes
Skipping useless range: AGEPROCINEMA
Skipping useless range: Trw-systeme-freinage
Skipping useless range: Affinity Media
Skipping useless range: ORACLE FRANCE
Skipping useless range: ORACLE FRANCE
Skipping useless range: FR-RAEI-OIPC-INTERPOL-LB_INTERNET
Skipping useless range: Regie Europeenne de Cinema
Skipping useless range: Adp Gsi France
Skipping useless range: PARAMETRIC TECHNOLOGY SA
Skipping useless range: PUBLICINEX
Skipping useless range: SAS INSTITUTE
Skipping useless range: GI - Customer Interconnexion With RAEI Backbone
Skipping useless range: XEROX THE DOCUMENT COMPANY SAS
Skipping useless range: LUCENT TECHNOLOGIES FRANCE SAS
Skipping useless range: Weifang zhucheng bureau of commerce and industry
Skipping useless range: Lianyungang police station monitoring room gov
Merged range 'China Youth Publishing Company', with range 'China Youth Publishing Company'
Skipping useless range: GAMANIA DIGITAL ENTERTAINMENT [JAPAN] CO.,LTD
Skipping useless range: GAMANIA DIGITAL ENTERTAINMENT [JAPAN] CO.,LTD
Merged range 'Guangxi area jail administrative bureau', with range 'Guangxi area procuratorate'
Skipping useless range: Bittorrent Scammer
Skipping useless range: SCHL