Networking :: Blocking Bittorrent Trackers - "single Poit Of Failure"
Apr 27, 2010
I've done some research on the issue of blocking bittorrent traffic. What I've come up with is that it is very difficult to detect the data traffic. Tools such us ipp2p fall short because of encryption of the data between peers. What I'm thinking of (and starting to test at the same time) is to block the "single poit of failure" - the trackers. My idea is to collect a list of IP addresses of the most used trackers and block all traffic to them:
Code:
# bittorrent trackers
# # tracker.prq.to
$IPTABLES -A INPUT -d 85.17.80.0/24 -j DROP
# # tracker.openbittorrent.com
$IPTABLES -A INPUT -d 188.126.64.0/24 -j DROP
# # free.btr.kz
$IPTABLES -A INPUT -d 195.210.47.0/24 -j DROP
# # tracker.mightynova.com
[Code]....
What do you think about this? Is this going to work? Where could I get a bigger list of bittorrent tracker addresses?
I keep on getting intermittent ethernet failures using a Gigabyte GA-MA790FXT-UD5P 790FX motherboard with a built-in network card. This is a problem on all operating systems.After many intermittent failures I think I've finally found the solution; turn the PSU off, wait until the CMOS light goes off (about 15 seconds), then turn the PSU back on. It appears a bug with Linux where a setting on the firmware of the network card is occasionally incorrectly modified causing it to malfunction, when power is removed from the device the setting resets to default and normal functionality is restored.
Recently, one the SMART utility said that one of the drives had failed and another drive was about to fail. I downed the box and hooked them up to my windows machine to run sea tools on them (They are all seagate drives). Sea Tools said that the drives were fine, while ubuntu said they were failing/dead. Yesterday I decided to try to fix one of the drives in the raid. I turned the server off, took the failed drive out, and restarted. Of course the raid didn't work because only 2 of the 3 drives were there, however it had been working w/ only 2 of the 3 drives for a couple months now (I'm a lazy college student). I turned it back off and back on with the drive there just to see if I could get the raid up again, but I havn't been able to get it to go. So far I've tried:
Code:
mdadm --assemble /dev/md0 /dev/sd[b,c,d] mdadm: no recogniseable superblock on /dev/sdb mdadm: /dev/sdb has no superblock - assembly aborted
[code]....
I'm looking for a way to trick the raid into working with just 2 drives until I can warranty the seagate and buy an external 1.5 TB drive to use as another backup. how to remove the bad drive from the array and replace it with a fresh drive, without data loss.
using fedora 9 i've problems getting bittorent to work. i have an external kerio firewall but my messages seem not to get thrue. I read about port forwarding, as a way to speed up bittorent I interprete that as bundling the port series 6881 till 6999 to ferdora:6881 so all the ports are channeld to the bittorent machine and 1 port.(tcp and Udp)
that how I did set it up, but i seem not to get a lot of throughput i guess Maybe 1kb per week, I do not know if this is what is seen as a slow bittorent.... on the firewall i see a lot of messages running arround but nothing seems to advance
what can I do, verify to get this running. (I temporarly switched off fedora's firewall( internal) is there a way to structuraly test bittorent? is my forwarding rule correct? (input multiple ports to single port?
I know, that this thread is old one, but I am having the same issue. It does not seem to me to be the problem of single torrent. It is more the way how much do I use my connection. If I have only 1-2 torrents, everything is ok. If I have 10, I get this problem. It is also followed by aprox. 30 secs of no internet connection. I use Deluge for downloading and my limits are set like this:
max connections: 200 max upload: 300 KiB/s max upload slots: 5 max connection attempts per sec: 20
first of all I am sorry about the mess in the question, I hope I am being clear enough.
I am using VectorLinux 6.0 standard, kernel 2.6.27.12. iptables v1.4.0 Deluge v1.18 the problem is that as soon as I do Code: iptables -A INPUT -j DROP Deluge hangs and stops responding.
I am trying to make iptables to drop everything except tcp,udp 6887 (for torrent) and except established and related. iptables -L looks like so:
[Code]...
Edit: Now I see that Firefox also hangs if I try to right click a tab when I have iptables -A INPUT -j DROP.
my Fedora 11 system is not starting anylonger. It stops with the message:
Code:
VFS: Can't find ext4 filesystem on dev dm-0
The system told me since a while, that a lot of the sectors of one disk of the (software) RAID compound are failed already. So tried to disconnect each of the disks and start them separately. Unfortunaltly this is not working (for one its is not working at all, the other wents the same far as with both), when I tried to recover the system with the Fedora DVD, it said no distribution found. I am quite new and do not know so much about linux system, so i do not know what further information you could need. Maybe it can be important, that both disks are encryped (the system wents so far, that I can type in the password).
I noticed my Internet slows to a crawl when I'm running bittorrent, but when I look at my torrent app (Transmission), the upload/download speeds are mere kilobytes per second, and my Internet has much higher bandwidth capabilities than that.So I tested it:No torrent running
I don't know what's wrong with my Ubuntu but everytime I open Transmission BitTorrent Client, the internet connection become unstable from time to time. Internet access run smooth without it but I need it to download file from torrent...
I used Dual-boot with XP and Ubuntu and I got no problem with 9.10 Karmic Koala but just got this problem after upgrading to 10.04 Lucid Lynx.
I tried Ubuntu, Kubuntu and now Xubuntu, all 11.04. I've also tried Deluge, Transmission and Ktorrent. With 10.10 everything worked fine (all variants). Also, in Windows 7 it's working fine. But now it drives me crazy. As soon as I start a torrent, the download starts but after 30 seconds or so the download drops to a zero. Also, I'm not able to browse anymore. The networkmanager tells me I still have a connection.
Some say it has something to do with the number of peers the client connects to, or it's my router. My router isn't the problem, as it's working fine with 10.10 and windows. So maybe it's the number of peers right? Question. Why can I connect with over 200 peers at the same time while I'm using 10.10 or windows, but can't do it with 11.04? Better put, what should I do to get this working fine again? Going back to 10.10?
I was just wondering if using a non-smp kernel would be ok on a older p4 system with no x. I am wondering due to some functionality in IPTABLES that is broken in the SMP kernels ( -m owner --sid.pid,cmd-owner).
Could someone that is running a NON-SMP kernel advise as to whether the support for -m owner --cmd-owner is working in iptables with those kernels? Also, could someone advise me if running a NON-SMP kernel is even advisable? The machine will not have x.
I have an internal network behind a server <10.0.0.1> connected to the internet that NATs my ip <10.17.11.88> only. NAT is not allowed to any other ip addresses. When I use Transmission Bittorrent client to download torrents, The thing is that this 10.20.0.244 is not my machine and doesn't have access to the internet at all. What is happening here? Can anyone help me?
I have a device that is working on modbus protocol andI have written a small program(with block TCP read method ) to read its registers via modbus protocol.my program is working very well but except those times that I unplug the Ethernet cable or turning off the modbus gateway during programs work.at this time my program stops on recv system call (if it reach this system call exacly when I unplug Ethernet cable or turning off the modbus gateway during programs work).I changed my source to work in nonblock TCP method, at this time with the same situation my program does not stop/block on recv system call but after pluging back the Ethernet cable or resuming the connectivity situation back it reads data incorrectly .this is my code:Quote:
PC seems to run fine in single channel mode but monitor reports no input in dual channel mode and memtest86+ lists from 1-3 errors per pass in single channel mode. Motherboard (Gigabyte P43T-ES3G) can't be set for the 1.65 volts required by the RAM (2x2 of OCZ3P1333LV4GK PC3 10666). The mobo voltage choices are 1.6 or 1.7 volts. I have tried both and increased the MCH voltage from 1.1 v to 1.2 v, but so far can't get it to run in dual channel mode at all and single channel mode seems to run fine but I still get errors in memtest86+. Also tried optimized Bios settings and loosened memory timings (from 7-7-7-16 to 8-8-8-27 and tRFC 60 to 70) and reset Command Rate from 0 to 2. CPU is Core 2 Quad @ 2.4 Ghz, PSU is rated at 400 watts, Video card is Gigabyte GT220.
Using Ubuntu 10.10 I have a VPN account with VPNtunnel.se. I configured everything as described on their site. It uses OpenVPN It connects no problem. However; after it connects instead of having a nice secure connection I have no connection at all! I can't access any site, email, bittorrent all come to a screeching hault. The service works fine in Windows. I'm useless with linux networking.
I have just set up the transmission bittorrent client on my server (using the web interface), and am trying to get the port forwarding right. After noticing low download speeds (and rare uploading), I decided to check if a port needed to be forwarded.
I found many conflicting sites, mentioning both the ranges 6881-6999 and the port 51413 (as well as TCP and UDP versus just TCP). My current configuration is to forward TCP and UDP port 51413 to my server.
I have a Debian server running at the gateway level on a LAN. This runs squid for creating block lists of websites - for eg. blocking social networking on the LAN. Also uses iptables.
I am able to do a lot of things with squid & iptables, but a few things seem difficult to achieve.
1) If I block http://www.facebook.com, people can still access https://www.facebook.com because squid doesn't go through https traffic by default. However, if the users set the gateway IP address as proxy on their web browser, then https is also blocked. So I can do one thing - using iptables drop all outgoing 443 traffic, so that people are forced to set proxy on their browser in order to browse any HTTPS traffic. However, is there a better solution for this.
2) As the number of blocked urls increase in squid, I am planning to integrate squidguard. However, the good squidguard lists are not free for commercial use. Anyone knows of a good squidguard list which is free.
3) Block yahoo messenger, gtalk etc. There are so many ports on which these Instant Messenger softwares work. You need to drop lots of outgoing ports in iptables. However, new ports get added, so you have to keep adding them. And even if your list of ports is current, people can still use the web version of gtalk etc.
4) Blocking P2P. Haven't been able to figure out how to do this till now.
I have a lifttime premium account at Megaupload.com. Recently I found that megaupload has blocked all IPs in my area. I have sent emails to their tech but nothing has returned!!I have tried to use proxies to download stuff from megaupload, however, none of them works for suspected bandwidth reason, not to mention that it might be slow too.
So, let's say there was a website www.qwerty.com, which is completely appropriate if not necessary except for the asdfg subfolder (www.qwerty.com/asdfg), which contains,say, pornographic material I want blocked. Is there any way to block "asdfg" without blocking the entire domain (www.qwerty.com)? I already tried editing my hosts file, but apparently that only works for whole domains.Also, while we're at it, can the hosts file be used to actually block IP addresses, or just domain names (so if I wanted qwerty.com with IP of 128.127.126.125 to be completely blocked, but know my family or employees are little smarter than that, I could add the line "0.0.0.0 128.127.126.125" to prevent all access to that website)?
I have a VPS which is running HTTPD, and its getting blown to bits by a DOS Attack. Turns out mod_evasive is totally useless (due to not running a total - rather counting per child process) and the only way to stop the box from running at 100% on all cores is to term HTTPD. So, what rules can I implement on the iptables firewall to block multiple requests from an IP? I saw this: [URL] Where someone has posted some rules but these dont work ("unknown error 4294967295" on the 3rd line). This is what i'm after though - block multiple requests from a single IP for a certain period of time.
I need to block some of my sites with SQUID Proxy. I added following lines to my SQUID configuration file but still the site remains unblocked.How to block it?
I'm trying to configure bind9 to block porn by having it pretend to be authoritative for a list of porn domains. It can then return a "fake" IP for the port sites, which points to a page on my server. So far, the only way I have found to do in this in bind requires a separate zone for each porn domain. This doesn't work because of memory problems - I have 1000's of porn domains to block.
I'd like to instead have bind forward queries to rbldnsd, which can take a list of domains in a "data set" file, and use it to return a single A record (pointing to my "access denied" page). However, I think this will not work because I would still need a separate "zone" for each porn domain name.
I have an ubuntu 8.04 dedicated server running openssh which I am having problems with.
The server is based in England yet I am currently working from Thailand. Slow speeds and timeouts I am used to but it is now over 24hr since I have managed to SSH the server (from here).
I just tried remote desktop on my PC back in the UK and this connected straight away through both SSH and SCP.
Thinking that it may be the IP being blocked from my works network I switched off wifi on my phone and tried to connect over the data network a few times with no luck.
Another strange problem is that when we got the server it was locked into a chroot jail which SSH(22) always leads into. After accessing SSH on port 22 I have to run a break script to gain root access. The sshd_config file says that the server is listening on port 57 yet I have never been able to access this.
I need to block some of my sites with SQUID Proxy. I added following lines to my SQUID configuration file but still the site remains unblocked.How to block it?acl blocksites url_regex yahoohttp_access deny blocksitesI have also tried saving some url & filter content in a file and edited configuration as follows,acl blocksites url_regex "/etc/squid/squid-block.acl"http_access deny blocksitesThe squid-block.acl file contents are.cricinfo.commp3
