Security Rules?
 

Hi Folks..

Where does PHEX (2.0.0.76) store it's security rules? I want to create a set of rules to distribute to friends which allows/denys certain IP ranges but cannot find the file where they are stored...

Thanks!

Rob

In you user home directory there is a folder called phex or .phex

In windows this usually is c:\Documents and Settings\<YourLogin>\phex

In this folder is a file called security.xml

The format is:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<phex phex-version="2.1.4.80">
<security>


<ip-access-rule>
<description>Banned by user.</description>
<isDenyingRule>true</isDenyingRule>
<isDisabled>false</isDisabled>
<triggerCount>196</triggerCount>
<expiryDate>1143121516735</expiryDate>
<isDeletedOnExpiry>false</isDeletedOnExpiry>
<addressType>2</addressType>
<ip>CFEA0000</ip>
<compareIP>FFFF0000</compareIP>
</ip-access-rule>

... more rules
...
...


</security>
</phex>



Gregor

Thanks..
 

Thanks sir...

That XML file..The IP listed... There are two TAGS..first IP and the other is Compare IP ..If you were doing a rule that was and IP SPAN ...ex: 202.34.34.00-202.34.34.255 ..How is this displayed? Would the IP tag be the first number and the compare be the second?? In HEX..

Thanks again..

I find that PHEX seems th be the most Flexible and powerful client out there for controlling what you want or need ....

A request would be able to dump all searches that stream by in the SEARCH monitor to a TEXT file or a log.. there is some neat stuff in there...

Thanks!

Yes, in case address type is 3 the ip is the "from" value and the compare IP is the "to" value.

Check this old thread for a more complete but still valid description.

http://www.gnutellaforums.com/showth...threadid=22835

Oh by the way if you like to block from x.y.z.00 to x.y.z.255
you can also use the address type 2 for a netmask...
like 255.255.255.0 in this case

address type would be 2
ip would be x.y.z.0
compareIp would be 255.255.255.0

resulting in a block of x.y.z.0 - x.y.z.255


The address type 2 is the most performant when evaluated and should therefore be preferred if possible. Most IP ranges can be specified with the use of a net mask.
Just search in google for a decent netmask calculation tool.

block all except?
 

Hi folks..

Is there anyway to block ALL except the ones you have a rule to ALWAYS accept?

And is there a way to STOP PHEX from looking for HOSTS at any point and just Dload from what you have listed..?

Thanks!

Rob

Re: block all except?
 

Yes... use a "accept" security rule with the IPs you only like to accept.
But keep in mind this counts for network, download and upload hosts.

Yes, just disconnect from the network. Downloads and uploads will still continue.

Thanks sir!...

Rob

I edited the security XML file on my PC and it doesn't seem to change update anything on the security tab of Phex. I even added some using the GUI, but as soon as i close teh program and re-open, my newly created rule is gone. All of the system rules still seem to be there, though. I even removed the security XML file altogether, but the system rules still showed showed up. Am i missing something here?

-Adrian

Btw... I'm using Phex 2.0.0.76. I had .0.9.0.44 for a while, but upgraded later.

-adrian

The system rules will always stay there, you cant remove them. If you delete the security XML file you only lose the trigger count of the system rules.

I tested creating security rules and restarting Phex and could not find any error.
Do you see new created rules in the XML after exiting Phex?

Gregor

Unfortunately, the file didn't show any changes. I completely uninstalled it and deleted the phex directory under my profile and then reinstalled the software. It looks like that it fixed the problem. I replaced the XML file and restarted phex and phex erased all my entries... I may have some sort of formatting error in the entries, so i'll double check those and let you know if it works.

-adrian

things are looking great now! thanks for the help!

R-
Adrian