Username:
Password:






 
Blocking the RIAA; A How-To For The File-Sharer
Posted by Expo on February 18, 2003 at 12:17 PM   (printer friendly)

There are many IP addresses that are scanning, and spoofing the file sharing networks, a look at how some programs such as peerguardian can help you out, and keep the RIAA going in circles. They want to see what you share, and put tons of fake files up. Files that are named correctly, have a good filesize, and wind up being thirteen minutes of 32k static in MP3.

Now, as for the scanning. They can see what you're sharing, right? Even if you use eMule, where people can't see what you share, and have to goto a forum to get links to your files so they can start a download, which helps a lot, they can still see the IPs(yet it is quite harder, since the client search feature won't work if they can't see your files).

Would you want to wind up like the Verizon guy? Do you want to be on evil's hitlist?

Well, there are ways to block these IP addresses, of the RIAA, Overpeer, mediadefender, and all of the people that are trying to find file-sharers to prosecute, and all of the people spreading fake files, and all the people that will fill your upload queue with 0.1K downloads, just so you can't share.

We'll start with PeerGuardian.

"This one, isn't exactly as good. The IP ranges, are too wide(it says so on its page, and it's only an alpha), so it'll block much more than the bad IPs, it'll block the good ones too. buy.com, won't even work while this is running.

Also, the program, only checks every 400 ms(milliseconds) to see if there's anything to block, so the RIAA could've been in and out of your system, and PeerGuardian, won't even have seen it. The version, that blocks every 100ms, isn't up, and hasn't been for some time.

A better solution would be putting the IP addresses in a firewall, since there would be no connection to block, unlike peerguardian which will block a connection that has already been made.

The IP addresses to block can be found here. The IP addresses, are updatede every few days, unlike peerguardian, which hasn't been updated in months. You have many ways of dealing with these IP addresses on their site.

Here are the instructions if you don't want to do any work, and you want to just grab a firewall and download a file for the firewall, and have everything be blocked. These are the instructions for Sygate Personal Firewall, which is the only firewall where it can be done automatically; since the "rules" on what IPs to block, don't have to be put in manually; you can just download the rule file off the site, point sygate to it, and all the IPs to block will be put in the advanced rules. Here's how to do that;"

This >http://koti.mbnet.fi/zerodata/

Updated block list there. There's a text file, and a .dat file. The text file is to add them manually, it's a list of the IPs. They are the IP addresses of the scanners of the P2P network, new ones, PeerGuardian's were too big a range, and outdated. These are improved, please don't ask me about them, I don't know about all of them, and don't ask why ontario government and FBI are in there, it's all on the site.

The .dat file is a list of advanced rules to be imported into Sygate Personal Firewall. All you have to do is tell sygate to import the rules, from the .dat file, and it's all blocked for you!

Here's how to use the .dat file in Sygate Personal Firewall, step by step, I did it.

1) Download and install Sygate Personal Firewall PRO(30 day trial), and open the firewall.

2) Goto tools, advanced rules.

3) Right click on the white area in the window, where the rules would be, and hit import rules or something like that.

4) Point it to the .dat file available for download on that site.

5) See that all the rules are there.

6) Download the free Sygate Personal Firewall.

7) Install it, and say that you want to update the old one, and keep all the settings from the previous one.

The free one doesn't let you import advanced rules from the .dat file, so you need to install the pro to do that. Then you install the free one, telling it to keep the settings from the pro one, so you can still have the advanced rules from the .dat file, and not need to buy it when the trial runs out.

Sygate Personal Firewall, (free)

Sygate Personal Firewall PRO, (trial)

The next solution, would be to put the list of bad IP addresses from here, http://www.zbl.ieplugins.com, and put them in PeerGuardian, or some other firewall.

That's all there is to it.


User Comments (These do not necessarily reflect the beliefs of this site)

creativetim  
Date: February 18, 2003 @ 1:31 PM
Nice.

:firstpost:

Aero-Zeppelin  
Date: February 18, 2003 @ 2:14 PM
Done. I use ZoneAlarm PRO, so it took a while to put all the IPs in, but I am assuming it will be worth it.

Or maybe when they find out that I am blocking them they'll try to say it is illegal to defend yourself from them. That would be great.

RyanS  
Date: February 18, 2003 @ 4:00 PM
I've added them to my ZA Pro as well. Let's see what happens..


Expose  
Date: February 18, 2003 @ 7:47 PM
Last complaint; after it says peerguardian as a URL, it wasn't meant to be in quotes.

/me runs into a hole before the news admins kill me :hide:

Expose  
Date: February 18, 2003 @ 7:47 PM
Anyone have a log to show? Sygate's log sucks... anything on ZA pro?

RyanS  
Date: February 19, 2003 @ 1:45 AM
nothing in my log yet

jmweirick  
Date: February 19, 2003 @ 5:11 PM
"Would you want to wind up like the Verizon guy? Do you want to be on evil's hitlist?"

asolutely! let them sue me, see what i care. i'll burn my hard drive and lets see if they can prove it. but i'll still put the IPs in NIS

pistachioann  
Date: February 19, 2003 @ 8:17 PM
Also, if you have a dynamic IP address, it changes on its own from time to time. There is a way you can change it manually as well, but I'm not sure of the procedure. This just makes it harder for them to track you.

jmweirick  
Date: February 20, 2003 @ 6:28 PM
why where the DoD and FBI sites on the P2PE list? and why was the Government of the Province of Ontario on there? i can see the DoD and FBI somewhat but Ontario?!

CornBr34d  
Date: February 20, 2003 @ 9:00 PM
If you have a dynamic (but seemingly static ip) do a ipconfig /release (from the command prompt. This will disconnect you). Call your isp and tell them you put a new nic card in your computer without releasing your old ip. There response needs to be that they will clear your arp table!. When this is done type ipconfig /renew at the command prompt and you will have a new ip. This is one of many methods. You could also use the method on http://www.klcconsulting.net/Change_MAC_w2k.htm which I personally perfer. You must be technically proficient to use this method!!

FadedInTheLight  
Date: February 21, 2003 @ 10:08 PM
Is there a quick EZ way to enter it into zone alarm? I just updated Zone alarm, and it erased all of the IPs i put in.

goldenpi  
Date: February 22, 2003 @ 8:48 AM
This is also a convenient place to block spyware.

Expose  
Date: February 26, 2003 @ 5:55 PM
jmweirick, I doubt so. They can prove it simply by

1) Bribes(obviously).

2) Showing at what time what IP was sharing what, so they can prove it was you.

I personally wouldn't want to have a chance of being in jail or paying thousands of dollars, but if that's you're preference...

FadedInTheLight, yes, you type the IP addresses into zonealarm :p

chewbacca13  
Date: February 26, 2003 @ 9:19 PM
I'm afraid the IP blocklist address just takes me to a big smiley face and the words "This is the cyberwebextreme.com domain"

Expose  
Date: March 1, 2003 @ 6:48 PM
Stupid site is down.

alextheseal  
Date: March 7, 2003 @ 3:27 PM
Hey guys. I have a mini firewall for P2P out in beta, which should help with the bad/blank files/cuckoo eggs out there. PeerBuddy is a mini firewall for P2P (Kazaa, EMule, etc). The program filters out the IP addresses of people who share blank, or faked files and it prevents you from wasting your time downloading those bad files. This will help with your downloads since a number of organizations and individuals are sharing bad and blank files out there. It also blocks known email miners, stalkers, spammers and surveillance companies

It's a beta so it doesn't do the most efficient job, which would be to block bogus search results (FastTrack has me locked out by their encryption), but it does stop Kazaa from connecting to the bogus files so you don't waste time downloading them. It also flashes on the tool bar when actively blocking, so you will know the “more sources needed”

The initial block list now currently blocks over 2,200,000 IP addresses

Find the beta application at http://www.isopleth.com/peerbuddy.htm , no Ad-ware, Spy-ware or viruses.

And yes to all the people who tell me it's a CPU hog, it is CPU intensive, but at the same time it's polite and will drop out of the way to allow other jobs access to the CPU (I can still watch a DivX , Kazaa, email and compile(under VMWare no less!) at the same time with this application running in the background). I hope with the production version to get lower level and therefore less CPU intensive.

BearshareFreak  
Date: March 11, 2003 @ 1:44 AM
IP list site is down... :(

Expose  
Date: March 21, 2003 @ 4:07 PM
http://koti.mbnet.fi/zerodata/index.php !!!

:nod:

goldenpi  
Date: March 23, 2003 @ 4:26 PM
I have a linux router which I set to block those (ipchains makes a very good firewall if used properly).

I wouldn't be at all surprised if the bot companies try to avoid the lists by moving IPs - if they just buy another 254 how long will it take for someone to identify them, espicially if they register them using another name. They could even rent ranges off regular ISPs. Currently practicly noone blocks them, so its not worth the effot. Thats not going to change unless someone makes a more convienient way to block them - A firewall rule autoupdater or a client that can be given a list of suspect IPs perhaps?

Expose  
Date: March 24, 2003 @ 9:08 PM
alextheseal, take your stupid crap outta here. Paying to block millions of IPs? Millions? Are there even millions of RIAA scanning IPs? Bullshit. You got enough attention on the other P2P sites on the news, don't put it here :|.

Mysterion  
Date: May 3, 2003 @ 8:31 PM
http://koti.mbnet.fi/zerodata/ is still down and http://koti.mbnet.fi/zerodata/index.php doesn't exists. Are there other p2p ennemies' IP lists or are they trully considered as unuseful ?

:firstpost:

methoduk  
Date: May 8, 2003 @ 6:52 AM
http://methlab.tech.nu is an interactive database-driven Bad-IP list, it's part of the PeerGuardian project but also lists in plaintext format for other firewalls and OS's.

PGv1.96b is out, it's a lot more reliable and has some new features. http://xs.tech.nu

Peace!!