https://hurlster.com/wiki/index.php?action=history&feed=atom&title=IPLIST
IPLIST - Revision history
2026-10-11T16:49:39Z
Revision history for this page on the wiki
MediaWiki 1.38.4
https://hurlster.com/wiki/index.php?title=IPLIST&diff=2417&oldid=prev
Gqwill69 at 13:15, 7 October 2011
2011-10-07T13:15:43Z
<p></p>
<p><b>New page</b></p><div>Prerequisite<br />
/etc/apt/sources.list.d/iplist.list<br />
#sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com \ <br />
#C6E3D905C8BCD56BB02E6E0B39456311108B243F<br />
deb http://ppa.launchpad.net/ssakar/ppa/ubuntu lucid main # disabled on upgrade to lucid<br />
deb-src http://ppa.launchpad.net/ssakar/ppa/ubuntu lucid main # disabled on upgrade to lucid<br />
<br />
apt-get install iplist<br />
<br />
ipblock.conf<br />
#-----------------------------------General-----------------------------------<br />
# start ipblock at boot time, used by ipblock.init<br />
AUTOSTART="Yes"<br />
<br />
# Verbose log and iplist output<br />
VERBOSE="No"<br />
<br />
# filtered (build-in iptables) chains, values: INPUT FORWARD OUTPUT<br />
IPTABLES_CHAIN_BLOCK="INPUT OUTPUT"<br />
IPTABLES_CHAIN_ALLOW="INPUT OUTPUT"<br />
<br />
# directory where lists are stored<br />
IPLIST_LISTDIR="/var/cache/iplist"<br />
<br />
# Use less memory by disabling BLOCK_LIST_* options, as a result only<br />
# one queue is used for all 3 chains<br />
LESS_MEMORY="Yes"<br />
<br />
#------------------------------------Lists------------------------------------<br />
# list names can be relative if files are in IPLIST_LISTDIR<br />
<br />
BLOCK_LIST="level1.gz level2.gz ads-trackers-and-bad-pr0n.gz"<br />
BLOCK_LIST_INPUT=""<br />
BLOCK_LIST_OUTPUT=""<br />
BLOCK_LIST_FORWARD=""<br />
<br />
# only lists in p2p format are supported<br />
ALLOW_LIST=""<br />
ALLOW_LIST_INPUT="allow-perm.p2p allow-temp.p2p"<br />
ALLOW_LIST_OUTPUT="allow-perm.p2p allow-temp.p2p"<br />
ALLOW_LIST_FORWARD=""<br />
<br />
#---------------------------------Ignored Ports-------------------------------<br />
<br />
IGN_TCP_OUTPUT="1:1024 1337 1900 3260 3306 3689:3690 6600 5353 8080:8800"<br />
IGN_UDP_OUTPUT="1:1024"<br />
<br />
IGN_TCP_INPUT="21 22 80 443 1900 1337 3260 3306 3689:3690 5353 6600 8800"<br />
IGN_UDP_INPUT="53 69 123 514 161 3306 3689 5353 5060 10000:20000 3260"<br />
<br />
IGN_TCP_FORWARD=""<br />
IGN_UDP_FORWARD=""<br />
<br />
#-------------------------------Ignored Protocols-----------------------------<br />
<br />
IGN_PROTO_INPUT="icmp"<br />
IGN_PROTO_OUTPUT="icmp"<br />
IGN_PROTO_FORWARD=""<br />
<br />
#-------------------------------------Log-------------------------------------<br />
<br />
LOG_FILE="/tmp/ipblock.log"<br />
<br />
# value: all | match | none<br />
LOG_LEVEL="match"<br />
<br />
# Use LOG target of iptables (syslog) for blocked packets<br />
LOG_IPTABLES="No"<br />
<br />
#-----------------------------------Update------------------------------------<br />
<br />
# URL of lists, for updating<br />
URL_FILE="/etc/ipblock.lists"<br />
<br />
# values "" or "0" disable update, used by ipblock.cron and GUI<br />
# value: number of days<br />
UPDATE_INTERVAL="1"<br />
<br />
# proxy to use for updating, e.g. http_proxy="127.0.0.1:8118"<br />
http_proxy=""<br />
<br />
UPDATE_STAMP="/var/cache/iplist/.update-stamp"<br />
<br />
#-------------------------------------GUI-------------------------------------<br />
<br />
# start GUI minimized if systray is supported<br />
GUI_START_HIDDEN="No"<br />
<br />
# autoscroll log<br />
GUI_AUTOSCROLL="Yes"<br />
<br />
# Look and Feel, values: System, Default, Gtk<br />
GUI_THEME="Gtk"<br />
<br />
# Whitelists used by the GUI, these need to be set in ALLOW_LIST<br />
GUI_WHITELIST_PERM="/var/cache/iplist/allow-perm.p2p"<br />
GUI_WHITELIST_TEMP="/var/cache/iplist/allow-temp.p2p"<br />
<br />
[[Category:Linux]]</div>
Gqwill69