Amule

Firewall

• !!! there is 3 ports to open: TCP 4662, UDP 4672, UDP 4665 (=standard TCP+3)
• eD2k works well, but can't connect to Kad and/or aMule always says Firewalled.
• Configured ADSL box to forward all ports 4500-4999 (TCP+UDP) to my machine.
• Changed default TCP to 4911.
• Some reference pages:
  • FAQ eD2k-Kademlia
  • No Kad. (UDP socket dies)

Privacy

MoBlock

• Homepage: http://moblock.berlios.de/
• To make on openSUSE: http://forums.phoenixlabs.org/showthread.php?t=16461
  • Need package: libnetfilter_queue-0.0.15.tar.bz2, libnfnetlink-0.0.33.tar.bz2.

iplist

• iplist is a list based packet handler which uses the netfilter netlink-queue library (kernel 2.6.14 or later). It filters by IP-address and is optimized for thousands of IP-address ranges. It is an alternative to MoBlock.
• Homepage
• Post on openSUSE: http://forums.opensuse.org/applications/388841-iplist-peerguardian-linux-must-have-p2p.html

Installation

• Download required netfilter packages from Netfilter page
  • libnfnetlink
  • libnetfilter_queue
• Download iplist from IPList page. There is openSUSE prebuilt RPMs.
  • iplist-0.22-0.suse11.i586.rpm
  • Other versions
• First build libnfnetlink:

tar -xvfj libnfnetlink-0.0.39.tar.bz2
cd libnfnetlink-0.0.39
./configure --prefix=/usr              # install libs in /usr/lib instead of /usr/local/lib
make
sudo make install

• Then build libnetfilter_queue:

tar -xvfj libnetfilter_queue-0.0.16.tar.bz2
cd libnetfilter_queue-0.0.16
./configure --prefix=/usr              # install libs in /usr/lib instead of /usr/local/lib
make
sudo make install

• Finally, install iplist, but ignore dependencies:

sudo rpm -ivh --nodeps iplist-0.22-0.suse11.i586.rpm

Usage

• Type sudo DISPLAY=:0.0 /usr/sbin/ipblock -g to start the GUI. At first boot, it will creates the rc.d entry.
• Type sudo /usr/sbin/ipblock -s& to start blocking.
• Configuration file is at /etc/ipblock.conf. All lists URL is at /etc/ipblock.list.

Troubleshoot

• If like me, your dhcp server gives you an address in the range 172.19.xxx.yyy, all internet connections will be blocked by iplist. To prevent this, an easy (but heavy) workaround is simply to remove list bogon.gz.

Netfilter

• Homepage
• Used by other filtering application above (usually libnfnetlink, and libnetfilter_queue)
• ipset is an alternative to iplist but requires more hand works.