www.dead-donkey.com
https://forum.dead-donkey.com/

Spud's explanation of why Peer Guardian doesn't work
https://forum.dead-donkey.com/viewtopic.php?f=31&t=2760
Page 1 of 1

Author:  George Tatum [ Mon Feb 02, 2004 8:12 pm ]
Post subject:  Spud's explanation of why Peer Guardian doesn't work

I figured there may be other newbies that would like to know the answer to this question as I couldn't find it in the forums, Spud has given the go-ahead for me to post this so here goes:

spudthedestroyer wrote:
George Tatum wrote:
I see u don't trust PG but couldn't find any explanation in the forums. Do you have a url I could check out, or is it any or all of the following:

1. Blocklist may not be up to date

2. MPAA types using own computers and so have legit IP

3. PG closes dodgy connections rather than stopping them being opened, giving MPAA time to download data.


Cheers

George


high ram usage, pathetic connection handling and paranoid block lists are just part of it, but the way internet protocol and the emule works is the ultimate reason why it doesn't work. It's not about trusting, its about it being pretty useless :)

You need to understand how mpaa gather ips to understand how useless it is. I always end up repeating myself, and I've written about this numerous times over at fileheaven.org, but there search is down. I'm not sure if i ever had to post it here, but feel free to post this in the topic if you wish :)

To get your ip, the scanner ip address merely queries the network for sources (via the server which has your ip logged, and the files you are sharing), this is then sent to the scanner and they have you already, with zero communication between your two clients. Any firewall or peerguardian is pretty useless because of this. Add on top of this the source exchange technology in emule and you have yourself other clients sending your ip as a valid source for the file. So to answer the three points.

1. pretty irrelevant, they get your pc through both direct and indirect communication. Block lists are pretty limited too, and i've noticed that lots of the ips aren't mpaa/riaa/nazis/aliens at all, they are home users. The only issue is whether a pc actually exists at the ip address if they get it indirectly, but assumption allows letters to be sent out anyway. There's a lot of paranoia surrounding what these organisations actually do, most just send out letters, and take no further action. There are of course show trials you've read about, but from what i've seen most people get a letter then carry on.
2. true, but regardless, if you have blocked them, they still have your ip from searching and source exchange
3. it is poorly programmed, reminds me a lot like zonealarm in this respect. but the reason is that you still appear as a source regardless of whether you block or not. They can not get any of the file from you, but they don't care, and as illegal as it sounds, this is irrelevant for them. You are still sharing the file and they have 'evidence' of you doing so.

It is pointless in its current form, only by blocking them from connecting to the network is it possible to block them regardless.

It's a shame fileheaven.org search is down, I've gone over this a few times for people who have posted things like "I'm using peerguardian and got busted" or posting they are 'safe' because they use it.

Don't get me wrong, I'm not discouraging use of blocking, I'm just saying it's not much good. If you have the same blocklist on a firewall and on peerguardian, ditch peer as its just pretty inferior. It's a hobby programmer making a tool to peddle to people who think its some kind of cure all solution, the firewall is design for security purposes and is more suitable for blocking connections.

Also uses a damn sight less sys. resources. I have a hardware firewall and use an emule ipfilter if you are interested in what form of 'protection' i have.

Hope that answered the question.

Author:  spudthedestroyer [ Sat Feb 07, 2004 7:22 pm ]
Post subject: 

here's protowall:
http://www.fileheaven.org/forum/viewtopic.php?t=21005

It's a better implementation of peerguardian, and worth a look for people who use it. The problems still persist that I highlight above, but its better than peerguardian, low cpu usage and is like implementing a ipfilter for the entire connection rather than just emule. It still doesn't offer as great a protection as highlighted above.

Author:  spudthedestroyer [ Mon Feb 09, 2004 10:41 pm ]
Post subject: 

wow, protowall is pretty damn stable, does what it says on the tin. This won't offer you protection, but if you are using peerguardian its better than that.

Kudos to protowall for showing how inadequet peerguardian is as a software solution :beerchug:

Author:  Grindhouse [ Sat Feb 14, 2004 2:06 am ]
Post subject: 

I like Protowall.. It does make one very paranoid!
Blocks pop up for Overpeer and some Kazza Fake file source in E-mule.
I notice that when browsing a couple of sites like...
http://www.sharereactor.com/ and http://www.shareconnector.com/

a pop up block for e-annix and mppa come up!

paranoia will destroy ya! :o :-o

Author:  spudthedestroyer [ Sat Feb 14, 2004 2:23 am ]
Post subject: 

indeed, block ranges are many media services and i've seen some NTL users in block list ranges too.

Protowall is favourable over peerguardian to say the least.

Author:  Jynks [ Mon Apr 05, 2004 1:21 pm ]
Post subject: 

How important is somthing like this?

Page 1 of 1 All times are UTC [ DST ]
What's blood for, if not for shedding?