Security Tab - default Deny on IP address
 

Where did the list of IP's that are denied (Deny rule) in the Security tab derived from?

Basically, I believe that spammers etc... IP addresses are denied by default, but where did this list come from?

They come from different sources.

Some come from gtk-gnutella, some come from another service of which I don't remember the name at the moment...

I get questioned alot about the newer versions of Phex not showing as many download candidates as in previous versions. I'm of the understanding that more "bad" or "unwanted" IP ranges have been filtered out so, in essence, those "extra" download candidates weren't really helping the user in his/her quest for a file.

I would like to answer them in a more definite way though, which is why I asked the first question.

Anyone that can still help me with the source of the IP's to deny in the security tab please do.... thanks.

Bluetack - FAQ

Is one more source.

Found it (after sleeping over the question my memory dug it out :) ).

I'm not perfectly sure, if we're using the List compiled by Aaron, too (a user from the Gnutella Forums). That one was quite extensive.

It might be that it blocks a bit too many IPs.

Since you see a reduced number of download candidates, it might be that we should switch back to only the blutack and the gtkg list.

Could you ask your users, if their download exterience also deteriorated?

Actually, most of my users (the ones that ask all the questions anyways) have reported a better download experience.

Although the reported number of download candidates seems to have decreased, it appears the ones that are not filtered out are providing better downloads (so obviously the blocked IPs weren't good ones anyways).

I just wanted an accurate answer to the question "why am I seeing fewer download candidates?".

I know that more IP's are being filtered out, I just needed to know where the "list" of IP's to filter came from.

Thanks for the prompt responses to my posts.

system rules
 

I have seen that many IP in ranges 10.x.x.x and 192.168.x.x are blocked by default, then I think that search results from firewalled users are bloqued. Is it possible to remove these rules?


I am using bluetack lists with another filtering software. Is it possible to deactivate all system rules?


(thanks to Phex developers, it is a great program, and sorry if my English level is not enough good)

Where do you see them being blocked?
In the security list, or in downloads?

At the moment system rules are enabled and I don't know how to disable them from the GUI.

It would be possible to add an option for deactivating them, but that would decrease the efficiency of Phex, since it also uses these block-lists when forwarding messages and for alt-locs, etc. - means: It doesn't bother processing anything which has any connection to these blocked hosts. I don't know if your software will go as deep.

Does it block incoming packets which don't originate directly from the blocked range but only have an IP from the blocked range somewhere in the header?

In security list. Some examples:


192.168.1.64/255.255.255.248 -Trigger count: 40031
192.168.1.100/255.255.255.252 -Trigger count: 38682
192.168.1.2/255.255.255.254 -Trigger count: 32875
10.0.0.4/255.255.255.252 -Trigger count: 1699

...

I have more search results with Phex 2.8 than with 3.0, and more sources for downloading.

That is the exact question that I get alot... which is the reason I posted the original question.

I try to explain to the person that Phex is filtering out download sources that probably aren't going to help your download experience... however, the next question is "Where does Phex get the "lists" of bad IP ranges" (hence this post).

Thanks for the answer above as I now have a more definite answer to provide the users asking the questions.

Go Phex!