Firewalling - Revision history

Astropoint at 15:52, 30 September 2013

2013-09-30T15:52:33Z

← Older revision		Revision as of 15:52, 30 September 2013
Line 149:		Line 149:
	=Starting from scratch=		=Starting from scratch=

	If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 (137.205.0.0/8 or 137.205.0.0/255.255.0.0) and 172.16.0.0 - 172.31.255.255 (172.16.0.0/12 or 172.16.0.0/255.240.0.0)) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection.		If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 (137.205.0.0/16 or 137.205.0.0/255.255.0.0) and 172.16.0.0 - 172.31.255.255 (172.16.0.0/12 or 172.16.0.0/255.240.0.0)) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection.

	Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254, 137.206.0.0 - 172.15.255.255 and 172.32.0.0 - 255.255.255.255 specifically.		Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254, 137.206.0.0 - 172.15.255.255 and 172.32.0.0 - 255.255.255.255 specifically.

Astropoint at 15:49, 30 September 2013

2013-09-30T15:49:18Z

← Older revision		Revision as of 15:49, 30 September 2013
Line 149:		Line 149:
	=Starting from scratch=		=Starting from scratch=

	If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 (137.205.0.0/16 or 137.205.0.0/255.255.0.0) and 172.16.0.0 - 172.31.255.255 (172.16.0.0/20 or 172.16.0.0/255.240.0.0)) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection.		If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 (137.205.0.0/8 or 137.205.0.0/255.255.0.0) and 172.16.0.0 - 172.31.255.255 (172.16.0.0/12 or 172.16.0.0/255.240.0.0)) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection.

	Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254, 137.206.0.0 - 172.15.255.255 and 172.32.0.0 - 255.255.255.255 specifically.		Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254, 137.206.0.0 - 172.15.255.255 and 172.32.0.0 - 255.255.255.255 specifically.

Astropoint at 14:36, 30 September 2013

2013-09-30T14:36:52Z

@@ Line 10: / Line 10: @@
 Guides for blocking blocking external connections to DC++ in various firewalls and operating systems are below.  If you are looking for a quick and easy firewall to block connections, then we recommend one of Comodo, Sygate or Kerio as these are light on system resources and are unlikely to interfere with your computer as a whole.
-NB.  Firewalls listed under Windows Vista will work for Windows XP as well with the exception of the Vista firewall itself.
+==[[Vista_7_Firewall | Windows Firewall]]==
 First you will most likely need to disable any DC++ rules in the firewall, then you can either run the commands above, or get the install.bat file below which will run them all at once.  So all you need to do is download the scripts right click on the appropriate one and 'run as Administrator'.
@@ Line 43: / Line 25: @@
 You can test whether this is working in DC++ itself by going to Help -> About DC++.  At the bottom of the window that shows up is a section saying latest version.  If this shows some form of error then the external blocking is correctly set up.  If it shows a DC++ version number then it is not.
 ==[[Comodo3 | Comodo Personal Firewall 3]]==

Astropoint: /* Windows 7/Vista */

2013-09-30T13:24:40Z

Windows 7/Vista

← Older revision		Revision as of 13:24, 30 September 2013
Line 68:		Line 68:

	Some people seem to have trouble running this firewall on vista even though it is technically compatible. Try Comodo if you experience issues		Some people seem to have trouble running this firewall on vista even though it is technically compatible. Try Comodo if you experience issues
	~~-->~~

	==[http://www.twofo.co.uk/resources/jeticoguide.rar Jetico Personal Firewall]==		==[http://www.twofo.co.uk/resources/jeticoguide.rar Jetico Personal Firewall]==
Line 74:		Line 73:

	Expert firewall		Expert firewall
			-->

	==[[Norton \| Norton Personal Firewall]]==		==[[Norton \| Norton Personal Firewall]]==

Astropoint: /* CA Personal Firewall */

2013-09-30T13:24:22Z

CA Personal Firewall

← Older revision		Revision as of 13:24, 30 September 2013
Line 63:		Line 63:
	Kaspersky v8 (2009) seem to have removed alot of the functionality of v7 in regards to specific blocking of applications to certain IP ranges as is required on campus. If anybody can work out how to do it on the newer versions please tell an op and we can try to knock together a guide.		Kaspersky v8 (2009) seem to have removed alot of the functionality of v7 in regards to specific blocking of applications to certain IP ranges as is required on campus. If anybody can work out how to do it on the newer versions please tell an op and we can try to knock together a guide.

			<!--
	==[[CA \| CA Personal Firewall]]==		==[[CA \| CA Personal Firewall]]==
	[[CA \| (guide produced by Rampage)]]		[[CA \| (guide produced by Rampage)]]

	Some people seem to have trouble running this firewall on vista even though it is technically compatible. Try Comodo if you experience issues		Some people seem to have trouble running this firewall on vista even though it is technically compatible. Try Comodo if you experience issues
			-->

	==[http://www.twofo.co.uk/resources/jeticoguide.rar Jetico Personal Firewall]==		==[http://www.twofo.co.uk/resources/jeticoguide.rar Jetico Personal Firewall]==

Astropoint at 13:17, 30 September 2013

2013-09-30T13:17:01Z

← Older revision		Revision as of 13:17, 30 September 2013
Line 84:		Line 84:

	=Windows XP=		=Windows XP=
			Due to the coming discontinuation of support for Windows XP, firewall options for this are no longer listed. If you are really desperate then ask and somebody will help you through setting it up (and advise you to upgrade to something else ASAP).
			<!--
	Unless otherwise stated, the following firewalls will work on Windows XP/2000. Note that almost all Vista compatible firewalls also work on XP so check above in case your firewall is listed there		Unless otherwise stated, the following firewalls will work on Windows XP/2000. Note that almost all Vista compatible firewalls also work on XP so check above in case your firewall is listed there

Line 127:		Line 129:

	It is not possible to use the Windows XP firewall to properly block external connections to DC++ as far as we know. Please choose one of the above firewalls instead.		It is not possible to use the Windows XP firewall to properly block external connections to DC++ as far as we know. Please choose one of the above firewalls instead.
			-->

	=Linux=		=Linux=

Astropoint: /* Starting from scratch */

2013-09-30T13:14:38Z

Starting from scratch

← Older revision		Revision as of 13:14, 30 September 2013
Line 161:		Line 161:
	=Starting from scratch=		=Starting from scratch=

	If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 or 137.205.0.0/16 or 137.205.0.0/255.255.0.0) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection. Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254 ~~and~~ 137.206.0.0 - ~~254~~.~~254~~.~~254~~.~~254~~ specifically.		If you want to do this from scratch, you need to find how to get your firewall to only allow Resnet IPs (137.205.0.0 - 137.205.254.254 (137.205.0.0/16 or 137.205.0.0/255.255.0.0) and 172.16.0.0 - 172.31.255.255 (172.16.0.0/20 or 172.16.0.0/255.240.0.0)) and the loopback address for stunnel (127.0.0.1) and blocking all other IPs from connection.

			Conversely you could allow all IPs then block 0.0.0.0 - 126.254.254.254, 127.0.0.2 - 137.204.254.254, 137.206.0.0 - 172.15.255.255 and 172.32.0.0 - 255.255.255.255 specifically.

	Also, if you do this on a firewall not listed here then please contact an op with at least a basic set of instructions to be uploaded here.		Also, if you do this on a firewall not listed here then please contact an op with at least a basic set of instructions to be uploaded here.

Astropoint: /* Windows 7 Firewall */

2013-09-30T13:08:14Z

Windows 7 Firewall

← Older revision		Revision as of 13:08, 30 September 2013
Line 22:		Line 22:

	The scripts used to configure the Vista firewall also work perfectly on Windows 7, and is the fastest and easiest way to get the firewall configured to block On Campus - Off Campus connections. If you want to do it manually in the Windows 7 firewall though follow the guide here.		The scripts used to configure the Vista firewall also work perfectly on Windows 7, and is the fastest and easiest way to get the firewall configured to block On Campus - Off Campus connections. If you want to do it manually in the Windows 7 firewall though follow the guide here.

			These have been recently modified to allow for changes to the Warwick network. Feedback would be appreciated as to whether they work or not, just ask on the hub if they don't and we'll try to figure it out.

	= Windows 7/Vista =		= Windows 7/Vista =

Astropoint: /* Windows 7 */

2013-09-30T13:03:30Z

Windows 7

← Older revision		Revision as of 13:03, 30 September 2013
Line 15:		Line 15:
	= Windows 7 =		= Windows 7 =

	As far as is known so far, all the firewalls and scripts that work for Windows Vista ought to work on Windows 7 in much the same manner. If anybody tries this and finds it not to be the case could you leave a message on the hub and (if feeling particularly inquisitive) any solutions you may have found.		As far as is known so far, all the firewalls and scripts that work for Windows Vista ought to work on Windows 7 and Windows 8 in much the same manner. If anybody tries this and finds it not to be the case could you leave a message on the hub and (if feeling particularly inquisitive) any solutions you may have found.

Astropoint: /* Windows (7/Vista) Firewall */

2012-04-29T17:04:13Z

Windows (7/Vista) Firewall

← Older revision		Revision as of 17:04, 29 April 2012
Line 32:		Line 32:
	First you will most likely need to disable any DC++ rules in the firewall, then you can either run the commands above, or get the install.bat file below which will run them all at once. So all you need to do is download the scripts right click on the appropriate one and 'run as Administrator'.		First you will most likely need to disable any DC++ rules in the firewall, then you can either run the commands above, or get the install.bat file below which will run them all at once. So all you need to do is download the scripts right click on the appropriate one and 'run as Administrator'.

	Also ensure that the DC++ executable file is located at '''"C:\Users\YourName\DC++\DCPlusPlus.exe"'''. If this is not the case the commands/scripts have to be modified accordingly. If you are using the preconfigured client from this wiki then you will either need to extract it to Program Files or change the rules to reflect the new location of the DCPlusPlus.exe file. If you go to '''C:\Users\YourName\DC++''' you should see the list of files for DC itself (DCPlusPlus.exe, favourites.xml etc etc) and '''NOT''' the ~~DCPlsuPlus~~ and stunnel folders.		Also ensure that the DC++ executable file is located at '''"C:\Users\YourName\DC++\DCPlusPlus.exe"'''. If this is not the case the commands/scripts have to be modified accordingly. If you are using the preconfigured client from this wiki then you will either need to extract it to Program Files or change the rules to reflect the new location of the DCPlusPlus.exe file. If you go to '''C:\Users\YourName\DC++''' you should see the list of files for DC itself (DCPlusPlus.exe, favourites.xml etc etc) and '''NOT''' the DC++ and stunnel folders.

	<span style="color:red;font-weight: bold"><span style="font-size:large">READ THIS: </span>Really, you cannot just run these scripts and expect it to work, you have to read the above and make the necessary changes!</span>		<span style="color:red;font-weight: bold"><span style="font-size:large">READ THIS: </span>Really, you cannot just run these scripts and expect it to work, you have to read the above and make the necessary changes!</span>