HOWTO: Graphical IP Blocker

[pk_m]

Nice one to gain knowledge for new users like me...

[dino99]

hi,

using ipblock 0.28 on lucid and maverick 32 with sun-java6-jre, all gcj packages removed

i'm searching why the whitelist never remove the "temporary" ip, even after a reboot. I need to open the list and remove them one by one, there is no way to select all the temporary ip at once, strange.

so, how to modify the conf file to have the temporary ip removed automaticaly by default on shutdown or better when closing Firefox or any browser ? ( i hope a new gui could give the choice to set a expiration for temporary ips)

[uljanow]

hi,

using ipblock 0.28 on lucid and maverick 32 with sun-java6-jre, all gcj packages removed

i'm searching why the whitelist never remove the "temporary" ip, even after a reboot. I need to open the list and remove them one by one, there is no way to select all the temporary ip at once, strange.

so, how to modify the conf file to have the temporary ip removed automaticaly by default on shutdown or better when closing Firefox or any browser ? ( i hope a new gui could give the choice to set a expiration for temporary ips)

How does your conf file look like ?

[dino99]

thanks for your response, below ipblock.conf (/etc) (its the default maverick installation, where i've added lists)

AUTOSTART="Yes"
IPTABLES_CHAIN_BLOCK="INPUT OUTPUT "
IPTABLES_CHAIN_ALLOW="INPUT OUTPUT"
LESS_MEMORY="No"
BLOCK_LIST="level1.gz ads-trackers-and-bad-pr0n.gz edu.gz spyware.gz bogon.gz china.p2p.gz dshield.gz level3.gz level2.gz india.p2p.gz "
BLOCK_LIST_INPUT=""
BLOCK_LIST_OUTPUT=""
BLOCK_LIST_FORWARD=""
ALLOW_LIST=""
ALLOW_LIST_INPUT="allow-perm.p2p allow-temp.p2p"
ALLOW_LIST_OUTPUT="allow-perm.p2p allow-temp.p2p"
ALLOW_LIST_FORWARD=""
IGN_TCP_INPUT=""
IGN_UDP_INPUT=""
IGN_TCP_OUTPUT="https "
IGN_UDP_OUTPUT="domain ntp"
IGN_TCP_FORWARD=""
IGN_UDP_FORWARD=""
IGN_PROTO_INPUT=""
IGN_PROTO_OUTPUT=""
IGN_PROTO_FORWARD=""
IPLIST_LISTDIR="/var/cache/iplist"
LOG_FILE="/tmp/ipblock.log"
LOG_LEVEL="match"
LOG_IPTABLES="No"
VERBOSE="No"
URL_FILE="/etc/ipblock.lists"
UPDATE_STAMP="/var/cache/iplist/.update-stamp"
UPDATE_INTERVAL="1"
http_proxy=""
GUI_START_HIDDEN="Yes"
GUI_AUTOSCROLL="Yes"
GUI_THEME="Gtk"
GUI_WHITELIST_PERM="/var/cache/iplist/allow-perm.p2p"
GUI_WHITELIST_TEMP="/var/cache/iplist/allow-temp.p2p"

[uljanow]

The configuration looks ok. Normally temporary IPs are removed when the GUI exits. If that's not the case, there should be some entries in the GUI logfile /tmp/ipblockUI.log.

[d3v1150m471c]

you can do this with iptables as well. firestarter works just as well, perhaps better.

[Lute]

Hi, thanks for the tutorial.

I removed the default lists and tried to put the ones from http://tbg.iblocklist.com/ , cause bluetack didn't used to update much, but it didn't load any IP's. So I went with their ipfilter.dat.gz and I believe it works, says loaded bunch of ip's.

So my question, is it ok what I did?, is the defaults better? if not, any other out there?

I would like support for upload whitelists, like for world of warcraft and other programs, but it works for now by adding 1 at a time to permanent.

Thanks in advance
Lute

[jre]

Please try the TBG blocklists with the links that you find here: http://iblocklist.com/lists.php
You will get slightly other URLs then. Otherwise blocklist selection is a personal decision depending on your personal needs. I suggest you read the explanations on iblocklist.com. Be careful not to take too many lists.

[TheDebianGuy]

Hi, i did the commands but it doesn't appear under application->internet. Any tips?
Thanks.

[Hakuna Matata]

I have the same problem as TheDebianGuy, i did all the commands, but the iplist doesn't appear in application--->internet. Please help