Moblock (peerguardian linux alternative)

[pelle.k]

Yes.

[clakar]

Hi pelle.k
I have just installed MoBlock on my feisty. Just wanted to say that it works really well on my Toshiba laptop, nice and smooth. I have checked if it works, as following:

guille@maschine:~$ tail /var/log/moblock.log
Blocked OUT: British Broadcasting Corporation,hits: 3,DST: 132.185.8.88
Blocked IN: Beijing Television Station China,hits: 1,SRC: 202.108.108.251
Blocked OUT: United Nations Development Programme,hits: 4,DST: 140.191.12.88
Blocked OUT: Bogon,hits: 8,DST: 42.34.13.88
Blocked OUT: DoD Network Information Center,hits: 4,DST: 215.248.37.83
Blocked OUT: Bogon,hits: 32,DST: 103.134.124.84
Blocked OUT: Bogon,hits: 4,DST: 196.55.5.88
Blocked OUT: British Broadcasting Corporation,hits: 4,DST: 132.185.8.88
Blocked OUT: p2p abusers,hits: 2,DST: 202.98.116.66
Blocked IN: SONY Corporation,hits: 1,SRC: 202.94.128.92

So, that means it works & blocks quite well.
I am just looking forward fot that marvellous python GUI I read at the beginning of the thread.
Please let us know! God bless an application as MoBlock!

[techstop]

Hi. I am getting an authentication error when trying to install;

WARNING: The following packages cannot be authenticated!
  moblock-nfq
Install these packages without verification [y/N]? n
E: Some packages could not be authenticated

I have run the commands in the first post for importing the key. Any pointers?

[worntreads]

hey there, i'm new to linux, and while i'm starting to get the hang of how things work around here, it's slow going in most regards. i've been trying to get moblock up and running for several days now, i've spent hours reading throught the last 51 pages of post trying the various methods described herein to no avail. i'm using edgy on a 32bit amd. moblock is installed , i get a pid, it starts and stops, but i don't think anything is being blocked. here's why:

a random address from guarding.p2p

fred@basement:~$ ping -c1 203.108.241.176
PING 203.108.241.176 (203.108.241.176) 56(84) bytes of data.

--- 203.108.241.176 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

fred@basement:~$

which results in the log

fred@basement:~$ tail /var/log/moblock.log 
Ranges loaded: 179221
Merged ranges: 0
Skipped useless ranges: 0
NFQUEUE: binding to queue '0'
error during nfq_create_queue()
Ranges loaded: 179221
Merged ranges: 0
Skipped useless ranges: 0
NFQUEUE: binding to queue '0'
error during nfq_create_queue()
fred@basement:~$

and while i've manually downloaded the guarding.p2p file, i can't seem to ever connect to bluetack.co.uk for the other lists.

my concern is that the log file never shows anything being blocked. along with the 'error during nfq_create_queue' bit. any help is always appreciated, thanks.

[jre]

@techstop: don´t worry, verification of moblock-deb.sourceforge.net is broken here, too. Don´t know what´s wrong, but you still get the correct packages.

@worntread:Your blocklist should be ok with 179221 loaded ranges. I don´t know why you can´t connect to bluetack.co.uk; normally if there are problems then only with the level1.gz list (which is the biggest list)

moblock is not working because of the "error during nfq_create_queue()". Perhaps your problem is that moblock was started several times, so just try `/etc/init.d/moblock-nfq stop` as root a few times and then start moblock again (or reboot).

If this doesn´t help then:
Did you install the netfilter-debs from the first post!?
You could still try moblock-ipq instead of moblock-nfq

[worntreads]

i've started from scratch on this one. i uninstalled moblock and the libs, then reinstalled using the debs in the first post (just to make sure i was on the right versions).

...and everything worked out fine. i'm still not sure what the problem was, but i'll assume user error and be happy. actually, i think i was using the wrongs debs to start and just snowballed from there.

thanks for the help.

[shame]

I have just installed the 64-bit version of moblock and followed the guide in the first post and it appears to be running ok (logs show it is blocking things at least).
I have one question though.

I have a really crap router and the firewall settings in it are very ropey and because I have to reset it to factory settings once a day to get proper access, I don't bother with the firewall rules at all, meaning everything is blocked.
So that being the case, is something like moblock still useful?

[chronniff]

?yo does anyone know how to open up specific ports so that they aren't blocked at all? I can't figure it out and I'm sure it is something simple, but it is driving me nuts haha

[konsole]

?yo does anyone know how to open up specific ports so that they aren't blocked at all? I can't figure it out and I'm sure it is something simple, but it is driving me nuts haha

sure is... search this thread for "whitelist" (hint: /etc/moblock/MoBlock-nfq.sh)

[jre]

@shame: a "normal" firewall and moblock have different purposes. If you want to block the IPs in moblock´s blocklist then moblock is usefull for you (this is all moblock is for, nothing more, nothing less). Go to www.bluetack.co.uk to see of what kind these IPs are.
On the other side your routers firewall will give you protection against unwanted connections/attacks not related to specific IPs.