View Full Version : how to block ip?
any tools and advice to stop people tracking or getting my ip?
PrntRhd
12-13-2003, 02:55 PM
With a firewall.
:)
Budfred
12-13-2003, 03:29 PM
Kerio, Sygate and ZoneAlarm are the three free options that seem to get the best press around here. It would be a really good idea to get on installed soon.... You can find links to them in mjc's security thread... (http://www.pcguide.com/vb/showthread.php?s=&threadid=15179)
Here's the deal.....
In order to have some sort of two-way communications with the rest of the network you need some form of address assigned to your computer. This is called your IP.
If you block your IP you block ALL other computers from "seeing" you. Even if you use a anonymous proxy service (which is the only real way to prevent other computers from seeing your true IP), the first machine in the chain has to know the true IP.
Think of your IP as your street address or phone number...just by having one does it give anyone a real advantage over you? (only if you belong to the tinfoil beanie club would you think that everyone and their government/space aliens will be out to get you because you have a phone number......). When you go to the store and purchase a refirgerator, do you give the neighbor's address and some "made-up" phone number to them?
Your house is private, but the front yard is not, even though it is still private property. When you go through your front door you leave one level of privacy and enter something that is predominantly a public area. Think of your modem/NIC as your front yard and your IP as the street address...when you make a connection to the Internet that address is now public.
If you are thinking about using some form of IP blocking to prevent something like the RIAA from tracking your P2P activities....forget it, they can subpeona any anonymous proxy service and get the reocrds, the can do the same for your ISP...which, BTW, has much better logs...connection logs and in some cases MAC address (MAC address is a unique number assigned to each network device/NIC). And any ISP or proxy service running in the US (and most other "devleoped" countries) have to surrender the records to law enforcement officials. Using an anonproxy to "snoop" or prevent casual detection is fine, but it will not stop serious detection atempts.
thanks for your help,were can i find these private secure proxy servers?also will i need a router?
and im not bothered about the irra or anything like that its a personel matter!
also which is the best most secure isp to use?
What do you mean by secure ISP....
because for the most part there is no such critter.
Security is your responsibility.
Some ISPs do take some amount of "security" measures for their customers, but often your ideas of security and the ISP's end up being at odds with each other.
jeeza
12-16-2003, 06:52 PM
Originally posted by mjc
Think of your IP as your street address or phone number...just by having one does it give anyone a real advantage over you? (only if you belong to the tinfoil beanie club would you think that everyone and their government/space aliens will be out to get you because you have a phone number......). When you go to the store and purchase a refirgerator, do you give the neighbor's address and some "made-up" phone number to them?
The idea of comparing your computer's IP number with your physical address is widespread and we have gotten used to it since years, but I think it's a bad analogy.
At the most, you could compare that IP number with your computer's street address, which it is in a way, your computer being located in a specific place on the Internet, or in a LAN.
Your computer's IP number pinpoints the origin and the destination of all communications to and from it (which are your communications), and as far as I can see that's about all, but it's everything.
Seen this way, I think it is understandable to try and keep some level of privacy. There are laws protecting the privacy of what you send through the postal office, so why shouldn't someone be entitled to the same protection of his computerized transactions ?
Nope....
Your MAC address, maybe not your IP...
Your IP is not really yours. It is the address assigned by the network (not going to get into the how to keep it simple). The MAC address is the actual address of the hardware. My IP actually pinpoints my ISP, for the length of time I am connected to them.
If you want truly private communications......then encryption, VPN etc are the way to go. Otherwise there is no significant measure of security gained by obsucurity.
It will not stop hackers...won't even slow them down.
It will not stop someone like RIAA from finding out who you are.
It will not stop law enforcemnet agencies from finding out who you are.
It may stop advertisers from compiling a single profile on you, but since most advertising related "tracking" is based on the local machine and sending information back to a central server, they will amass several profiles....
It does not add any additional protection to any data you send, in fact it may even increase the risk of that data (not going to get into the "free" anon proxy racket.......just let's say that it is mostly hacked machines providing THAT service)!
so how do i set up a proxy server then?
John0904
12-18-2003, 01:23 PM
Hide your IP address (http://www.sa6ry.com/surfanonymous/faq/hide-ip-address.html)
Variable
12-19-2003, 01:16 AM
What you need is an updated list of IP's to ban from connecting to your machine. The one I use is called PeerGuardian. Its currently blocking 82.4 million IP's. http://homepage.ntlworld.com/tim.leonard1/methlabs.htm
It's a simple firewall with a list of updated IP's from orginzations, that you don't want to look at your machine, from all over the planet. Remember, there is no total protection, not with a proxy or NAT or a firewall. If you hack a system you can be tracked back to your ISP. BUT, if RIAA wanted to scan your hard drive while you were connected to a p2p, they couldn't and they are not gonna subpoena you unless they know you have files on your machine that you shouldn't...
V
John0904
12-19-2003, 09:55 AM
Originally posted by Variable
if RIAA wanted to scan your hard drive while you were connected to a p2p, they couldn't and they are not gonna subpoena you unless they know you have files on your machine that you shouldn't...
Actually, that is incorrect. Probably more of a disbelief.
If someone deliberately shares files across the Internet with P2P, they are fair game. But only those files they share.
Variable
12-19-2003, 11:36 AM
Survey says " EHHH"
If their IP is blocked they cannot gain access to your machine. Next time you boot up your fav o rite p2p and connect to a share click on the info button for the connected share and you will see there IP. If you block this IP they will not be allowed to communicate with your machine. Another way you could block is by username, but this has obvious holes. Please read all my post and not one sentence.
John0904
12-19-2003, 02:10 PM
Originally posted by Variable
Survey says " EHHH"
Not sure what survey you are referring to, but I wasn’t in it.
If their IP is blocked they cannot gain access to your machine.
I am glad you feel confident. With IPv6, expect your blocked IP addresses to increase to the billions.
Next time you boot up your fav o rite p2p and connect to a share click on the info button for the connected share and you will see there IP.
And how would you tell if that is their real IP address? What if they were going through a proxy server or connecting through a remote machine?
If you block this IP they will not be allowed to communicate with your machine.
What IF their IP changes? Of course you can block a range of IP address, but that will only work for so long.
Another way you could block is by username, but this has obvious holes.
User names are like IP’s. They can change. Not as frequent, but nevertheless they do change.
Please read all my post and not one sentence.
I did read the entire post. I am sorry that I focused on one sentence that I thought that needed attention.
Next time I’ll quote everything and pull apart every sentence.
By the way, all I was saying is that nothing is guaranteed. Just because someone can block IP addresses does not make them invisible, as mjc stated.
Variable
12-19-2003, 03:42 PM
ahh the ego. First of all we arn't using version 6.. Secondly that is just a new structure to allow more IP's , just because they number of available IP's increase it doesn't mean we suddenly have 2 billion new users ;p I won't even mention the fact of how powerfull most home computers are at crunching large numbers...
Your missing some basic concepts here. What they use for security is irrelevant. You are not trying to scan their share, they are trying to scan ours. Whether they use a proxy means nothing, think about it. The proxy or NAT for that matter, merely blocks you from seeing internal routing tables/information. They still have a valid IP issued to them, either static or through a DHCP server, from their ISP. In the case of many of these organizations it turns out they indeed have static IP's.
IP ranges are blocked. The lists are collated by people who are itnerested in security and watch their firewall and snort logs for probes. In the case of PeerGuardian it is simply a group of privacy minded intelligent people who, on their own, gather lists of IP's and put them in a format for the application to block. It is not a static process but, dynamic its more akin to the "open source" concept. Security on the internet has to be proactive and intelligent or it will simply be bypassed by proactive intelligent people.
If you could come up with some valid arguments Im open to debate. But, so far you are not making a lot of sense.
Variable
that software isnt for win me
vBulletin v3.6.1, Copyright ©2000-2012, Jelsoft Enterprises Ltd.