HOWTO: Graphical IP Blocker

[mandrill]

* release (0.18)
* made init scripts more distribution specific 
* added ALLOW_LIST option
* changed URL list format
* integrated country lists

Finally there is an IP-whitelisting feature. The updated first page describes how to use it.

And this is what I get. Immediate and total crash due to java conflict.

jim@monkey:~$ sudo ipblock -g
exec: 348: java: not found

I have jre6 installed and every other program works - this one did too
until I re-installed gutsy a couple day ago.....

[uljanow]

What does "whereis java" show and is a default java VM set ("sudo update-alternatives --config java") ?

[mandrill]

jim@monkey:~$ whereis java
java: /usr/bin/java /etc/java /usr/share/java /usr/share/man/man1/java.1.gz

jim@monkey:~$ sudo update-alternatives --config java
[sudo] password for jim:

There are 2 alternatives which provide `java'.

Selection Alternative
-----------------------------------------------
1 /usr/bin/gij-4.2
+ 2 /usr/lib/jvm/java-6-sun/jre/bin/java

Press enter to keep the default[*], or type selection number:


I started following the file path as per "whereis java" & got this far - usr/bin/java, where I got this - THIS LINK IS BROKEN, "This link can't be used, because its target "/usr/lib/jvm/java-1.5.0-sun/jre/bin/java" doesn't exist."

Why, I wonder, is it looking for java-1.5.0?

This is also broken- looking for version 5 of java......... /java.1.gz

[mandrill]

I think I solved this. I installed "galternatives" in terminal, then searched for and deleted every directory with a reference to jre, then I deleted .java in my home folder, then re-installed jre6 from synaptic, and now iPBlock seems to work. Lets see if it continues to work.....

[Nameless_one]

How can I add my own iptables entries, while using ipblock? Will they be restored after a restart?

I want to allow traffic on port 22, so that I can login remotely to my PC via ssh.

EDIT: I also have my http traffic blocked I have told IPBlock to ignore http and https, and I have also whitelisted my router's IP (and my own in the local network), but a couple of minutes after IPBlock starts, it begins blocking my browsing, and in the log are shown blocks containing traffic from my router to my local IP.

[mandrill]

How can I add my own iptables entries, while using ipblock? Will they be restored after a restart?

I want to allow traffic on port 22, so that I can login remotely to my PC via ssh.

EDIT: I also have my http traffic blocked I have told IPBlock to ignore http and https, and I have also whitelisted my router's IP (and my own in the local network), but a couple of minutes after IPBlock starts, it begins blocking my browsing, and in the log are shown blocks containing traffic from my router to my local IP.

You're off topic, but I would suggest looking into moblocker (peer guardian's "replacement". And if you've turned off HTTP - well, you've turned off http. Good Luck!

[Nameless_one]

I am using moblock already, and trying to replace it with IPBlock.

The problem was that even though I had made a .p2p file and added it to iplist.conf, something I did reverted iplist.conf to its previous state (I think I restarted IPBlock). That problem's gone.

Adding an exception to iptables is a bit off topic, but I am more concerned about how will IPBlock behave after I do that, and wether this will interfere with its proper function. If this is still off topic, then OK.

[uljanow]

The GUI needs to be closed before making changes to ipblock.conf.
The only limitation with other iptables rules is that the rules have to be inserted before IPblock starts.

[Nameless_one]

Thank you, that was the answer I was looking for.

EDIT: actually, there is one more question: when is IPBlock started and its iptables rules initialised? How can I automatically add iptables rules before ipblock starts, on system startup? I guess I could add them to /etc/init.d/ipblock, but that sounds kinda hackish :-\

[uljanow]

If autostart is set IPblock inserts iptables rules at the last runlevel (S99). Otherwise when you enable it. I would recommend using a custom init script or front-end like firestarter or fireHOL. Both ways shouldn't conflict with IPblock.