PGL, Peerguardian Linux and Linux MInt 19

[sergio_63]

Good morning

First Things First: this is only an experiment, if you want to try it it's at your own risk.
For me it's working, but it's only an experiment...
Second but not least: I don't want to star here a discussion on the opportunity to use PGL or not ecc. This is not the matter.

I've understood that the normal repo of PGL it's not updated recently and not compatible with Bionic Beaver so Mint 19 refuse to install.
I've read various complaints in internet but not real solution (behind compilation, that after various years of linux life remain a great mystery to me).
So I went to a some sort of solution that is, say, an experiment, but since it seems to work I'm willing to share haw I do it.

First of all I just installed Mint 19 Cinnamon in a new partition, so Mint 18.3 Cinnamon it's intact and working.
In the 18.3 partition there is our good last version of PGL installed and working. So I've taken the 3 .deb packages that the system assemble and put in the cache folder when you install something via apt-terminal. I copied them in a folder of my 19 partition and simply installed it with double click. The package manager work on the dependencies and the installation go on right. If I'm permitted to do so, I can attach the three .deb files that I don't have in any way modified (I'm not able to). The version of this PGL its the last (2.3.1)

Second: the executable needs to be managed with root permissions but here come another surprise: Mint 19 has erased from existence also gksudo, gksu, kdesu, kdesudo and so on.
So for this experiment working you must not invoke the program from system menu (Internet) because it's not really working but instead open a terminal and put:

sudo pglgui

in it.
After you insert the root password, Peerguardian Linux opens properly, with an old interface, but seems to work well, configure the lists, ecc.

If someone understand the right syntax of the Admin:// command that seems to substitute gksudo ecc, we will be able to open the settings of PGL, insert the ADMIN:// command to open the program with Root rights but without use of the terminal.

Or... have someone an idea of how re-implement gksudo ecc in Mint 19?

Hoping to be of some help.

[smurphos]

On an assumption - that may not be correct - that most Peerguardian users have it as a line of defense when torrenting, Transmission natively supports the same format of blocklist.

[sergio_63]

I'm interested in security and experiments, but your assumption and information may have some interest for someone.

[Rtep]

Hello sergio_63, I'm extremely interested to try your PeerGuardian experiment, but because I'm still newbie, I need step by step instruction how to do it. For example..."So I've taken the 3 .deb packages that the system assemble and put in the cache folder when you install something via apt-terminal." I'm totally lost by this sentence. PLEASE can you explain your experiment in big details? Thanx in advance for any help.
rtep

[Rtep]

Do any one please help me with sergio "experiment"? I need to install Peer Guardian on LM 19.1 Urgently. Thanx in advance for any help.

[trytip]

Do any one please help me with sergio "experiment"? I need to install Peer Guardian on LM 19.1 Urgently. Thanx in advance for any help.

there's no updated blocklist for peerguardian, where would you get one from?

[Rtep]

You can get all blocklist here: www.iblocklist.com Subscription for FULL YEAR is only $9.99. If you do not know how to use blocklist - to put them to Peer Guardian, let me know, I'll help you. Do you have any info how to install PG on LM 19.1?

[trytip]

You can get all blocklist here: www.iblocklist.com Subscription for FULL YEAR is only $9.99. If you do not know how to use blocklist - to put them to Peer Guardian, let me know, I'll help you. Do you have any info how to install PG on LM 19.1?

can't trust these listas are updated at all, there's no point in paying for this list it would make more sense to use that money for a good VPN. i use level1 from bluetack but only for torrents and it's integrated into my qbittorrent. i have a script that downloads whatever iblocklist and converts it to .p2b for use in qbittorrent

i just can't see any advantages of using PG systemwide. there are better ways for privacy. the first line of defense is /etc/hosts https://someonewhocares.org/hosts/ or with a privoxy/tor setup

thanx, don't need help i stopped using peerguardian even in windows like 10 years ago, it's a dying technology and not worth the money in my opionion

this script will create a qbittorrent ipfilter block if anyone needs to use it. by default it will only attract level1 and bogon, but can be used to get more lists.

create blank text name it ipfilter.sh paste the code, save and make it executable. when you run it in terminal it will create a working folder and your qbittorrent compatible list will be there. to setup in qbittorrent/options/connection/ip filtering/apply to trackers (if you use firejail/qbittorrent put the filter in .local/share/data/qBittorrent)

Code: Select all

##make a sub-directory and work therein
mkdir working
cd working

##backup old list
mv blocklst.p2p blocklst.p2p.old

## Get the lists

wget https://list.iblocklist.com/?list=bt_bogon -O bog-z
wget https://list.iblocklist.com/?list=bt_level1 -O l1-z
#wget https://list.iblocklist.com/?list=bt_level2 -O l2-z
#wget https://list.iblocklist.com/?list=bt_level3 -O l3-z
#wget https://list.iblocklist.com/?list=bt_templist -O tmp-z
#wget https://list.iblocklist.com/?list=bt_spyware -O spy-z
#wget https://list.iblocklist.com/?list=bt_spider -O spi-z
#wget https://list.iblocklist.com/?list=bt_ads -O ads-z
#wget https://list.iblocklist.com/?list=bt_hijacked -O hijack-z
#wget https://list.iblocklist.com/?list=bt_dshield -O hack-z
#wget https://list.iblocklist.com/?list=ijfqtofzixtwayqovmxn -O threat-z

## Merge the lists

#cat bog-z l1-z l2-z l3-z tmp-z spy-z spi-z ads-z hijack-z hack-z threat-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z tmp-z spy-z spi-z ads-z hijack-z hack-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z threat-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z > blocklst.p2p.gz
cat bog-z l1-z > blocklst.p2p.gz
#cat l1-z > blocklst.p2p.gz

## Decompress

gunzip blocklst.p2p.gz

## Clean individual list files

rm -f *-z

[Rtep]

trytip, thanx for your reply. I'm using Peer Guardian for years and I'm very satisfy with the result. I believe......it is always better to protect yourself by yourself then using VPN. Do you know all those guys who offering VPN? Do you know what happens with all your logs on their servers? I don't! Thanx again.

[trytip]

security on the internet has changed drastically since last 10 years. using peerguardian will not save you from your ISP knowing what you download. https://iknowwhatyoudownload.com/en/peer/ this is only if you download torrents

these days ublock origin for your browsers is basically all you need. most users using peerblock don't even know what they blocking and why. you need to ask yourself why you need peerblock in the first place. and how do you think peerblock is helping you

[Rtep]

ytrtip, Before I put any list to my Peer Gardian, I do my reading to figure our what for I need or not that list. Peer Gardian is not only for torrent downloading. It protect me from all those who want to SPY on me!! ETC list can prevent my browser to connect to certain site! That's big different between two of those "protection".

[smurphos]

The same effect can be had by blocking directly from /etc/hosts.deny, and/or just using a currently maintained browser add-on such as uBlock.

I wouldn't be confident with PeerGuardian now - it is now fully abandoned in terms of development (more than 12 months with an update and no effort from the devs to support the current LTS release more than 6 months after that was released), most torrent clients on Linux natively support blocklists and the other protections provided can be added in other ways.

[trytip]

ytrtip, Before I put any list to my Peer Gardian, I do my reading to figure our what for I need or not that list. Peer Gardian is not only for torrent downloading. It protect me from all those who want to SPY on me!! ETC list can prevent my browser to connect to certain site! That's big different between two of those "protection".

yes but how does it protect you from those that spy on you? i would invest my time learning how to block everything with ublock origin instead. or learn how to custom make your own /etc/hosts. i keep an ipfilter for qbittorrent not because i don't want to be spied on but because it removes servers and users that spam the torrent swarm with junk data.

my favorite ipfilter update is back, this is where i get my updated ipfilter for qbittorrent
download http://upd.emule-security.org/ipfilter.zip from http://www.emule-security.org/ extract it and RENAME it ipfilter.dat then use it in qbittorrent or any client that can use an ipfilter.dat

[redlined]

sneaking in here to say, trytip your ipfilter.sh (works like a charm!) and other emule source for torrent blocklist is very much appreciated, thanks for posting those tips!

I recently ventured into torrents for first time in LM and downloaded all the LM ISOs 18.3 and 19 (along with other distros ) and quickly found when doing some other light-hearted searches that a good blocker source was needed asap. Hadn't gotten around to sorting it all yet, your advices sound perfect for that concern that the blacklist at my local dnscrypt proxy (used instead of hosts file, uupdates via script) nor uBlock would help with. Back in the saddle again

[Rtep]

Hello guys. Thanx for your "input", but..........There is lots of spying on internet. They call that "data collection". For me data collection is violation of 4th. amendment of US. Constitution. NOBODY have a right to collect any data from me unless I agree! "LIST" (in etc) make by me is not so bad, but is just preventing browser to connect to certain website. Peer Guardian preventing everyone from list YOU pick (Government, countries, servers,companies...) and use in PG from spying on you. VPN is (to me) very dangerous. I do not know those people/companies who offering their VPN services. They can collect data with your consent and you even paying them for it! LOL! Unless I figure out how to install PG, I'll not use LM 19.1 for entering internet AT ALL. Thanx for your effort anyway.

[redlined]

Hello guys. Thanx for your "input", but..........There is lots of spying on internet. They call that "data collection". For me data collection is violation of 4th. amendment of US. Constitution. NOBODY have a right to collect any data from me unless I agree! "LIST" (in etc) make by me is not so bad, but is just preventing browser to connect to certain website. Peer Guardian preventing everyone from list YOU pick (Government, countries, servers,companies...) and use in PG from spying on you. VPN is (to me) very dangerous. I do not know those people/companies who offering their VPN services. They can collect data with your consent and you even paying them for it! LOL! Unless I figure out how to install PG, I'll not use LM 19.1 for entering internet AT ALL. Thanx for your effort anyway.

hi Rtep!

I share your privacy and data concerns and I understand your preference to use PG to manage the threat(s) and do not find issue with that. I also see you take great care in customizing your blocks to cover primary areas of concern, very good!. trytip and smurphos are suggesting equal or greater levels of protection than PG provides, especially considering PG is falling by the wayside in regards to updates and if there is no one maintaining the program code or ensuring accuracy of blocklists generated for and used in PG then the issue can grow exponentially in the shadows while you trust everything is up-to-date unawares of outdated app vulnerabilities or outdated block lists.

I think a good test of PG's resolve to being trustworthy security for the masses will be told by seeing if and when they do update to run as expected on Linux OS they support, based on the lastest versions by the primaries (Ubuntu, Debian, RedHat, even Mac and Windows, etc). If not, then you must ask why not?

otherwise questions to ask yourself to help determine if PG will continue to meet your needs into the future (where indeed everyone wants all the data being transmitted by everything "Smart", and "dumb" but also connected, not just internet connected computers).

Is PG blocking everything for whole system and will it continue to do so reliably as time goes on. Same questions apply considering block lists provided. If not, are there better, current, options available...

The hosts file is a sure way to block DNS requests for whole system, connection is just dropped when asked to resolve IP address of website on the very well filtered and maintained list(s) in order to connect. This obviously does not protect you from IP direct sort of connections. uBlock will only help with the internet browser it is running on. Torrent and downloader programs will need their own blocklists since they usually operate on IP direct (no DNS resolves needed making hosts file blocking not applicable). Considering all this, yes PG may still serve your needs the best, it is on you though to ensure it stays current and remains a safe app to use, as I feel sure you already know and do.

[trytip]

my ipfilter.sh script is compatible with peerblock but the ipfilter.dat from emule is not. the ipfilter.sh can be expanded to include all major lists from https://www.iblocklist.com/lists but beware that when you load a list it uses a lot of RAM so keep at default if you have low RAM. the default adds level1 and bogon

i'm not sure if doing all the lists is overkill but if you want to try it the list is HUGE about 50MB and editing it is quite rough if you even need to. you can have 2 lists you can switch between them. as i mentioned if you use firejail/qbittorrent the list has to be placed in .local/share/data/qBittorrent/

you can rename your ipfilter_min.sh and create one ipfilter_full.sh or however you wish to name it and here it a list that will download 11 lists. you may get an error in qbittorrent complaining about lines being malformed, this means there are blank lines in the filter. you can leave it as is or open and edit the filter to remove the blank space

ipfilter_FULL.sh

Code: Select all

##make a sub-directory and work therein
mkdir working
cd working

##backup old list
mv blocklst.p2p blocklst.p2p.old

## Get the lists

wget http://list.iblocklist.com/?list=bt_bogon -O bog-z
wget http://list.iblocklist.com/?list=bt_level1 -O l1-z
wget http://list.iblocklist.com/?list=bt_level2 -O l2-z
wget http://list.iblocklist.com/?list=bt_level3 -O l3-z
wget http://list.iblocklist.com/?list=bt_templist -O tmp-z
wget http://list.iblocklist.com/?list=bt_spyware -O spy-z
wget http://list.iblocklist.com/?list=bt_spider -O spi-z
wget http://list.iblocklist.com/?list=bt_ads -O ads-z
wget http://list.iblocklist.com/?list=bt_hijacked -O hijack-z
wget http://list.iblocklist.com/?list=bt_dshield -O hack-z
wget http://list.iblocklist.com/?list=ijfqtofzixtwayqovmxn -O threat-z

## Merge the lists

cat bog-z l1-z l2-z l3-z tmp-z spy-z spi-z ads-z hijack-z hack-z threat-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z tmp-z spy-z spi-z ads-z hijack-z hack-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z threat-z > blocklst.p2p.gz
#cat bog-z l1-z l2-z l3-z > blocklst.p2p.gz
#cat bog-z l1-z > blocklst.p2p.gz
#cat l1-z > blocklst.p2p.gz

## Decompress

gunzip blocklst.p2p.gz

## Clean individual list files

rm -f *-z

[Rtep]

Thanx guys for very valuable input. Good ideas! I'm frequently checking iblocklist.com for new and current lists. I do not using all of them, only about 9. Those is serving me very well. Peer Guardian is starting with my OS and running all the time. By list movements in PG I know PG is working OK. My only problem is, PG cannot be installed on LM 19.1, because LM repository changed to Bionic. I'm not sophisticated enough - I'm still considering myself as newbie - to compile and make PG working again. I thing I have to learn MORE. I tried ALIEN to make .deb package from .tar.gz. It was kind of success....now I have all files installed in File System pgl-2.3.1 folder, but I do not know how to start PG from there. Well that's bad. If you know what to do from there I'll appreciate any help to proceed....

[redlined]

hi Rtep!

I'm new to linux too, about 8 months now and just two days ago built my first from source installable .deb I used these simple instructions provided by xenopeek and it just worked. read the source readme and remember checkinstall is your friend

cool thing about .deb is the deb installer will download and install support packages as well register it all in system package manager where Synaptic, apt and updater start to track it and keep it updated (when surpasing your file version compiled, if I understand that correctly).

before you run the new built .deb using checkinstall instructions you want to get rid of the current one that is not working for you. If you used deb installer to install your build then you should be able to remove it as well, if not seek and delete the files and directories that is shown under the package tree in the debinstaller dialog. If PG comes with icon and map to menu it will be added there as part of install process, otherwise use terminal/cmdline or look that tree again to find main app executable and make a link on desktop or panel for convenience. You can also try man <program> replacing <program> with the name of app executable or <program> -h or --help to see if there is anything there for tips and flags to use.

------
trytip, thank you for the additional tips on script and blocklists! I'm making a monster here

[Rtep]

I'm desperate! I'm willing to pay anybody who will deliver .deb package from pgl-2.3.1.tar.gz. Please anyone help.I need install Peer Guardian on LM 19.1 mate. Thanx for any help in advance.