freeware ip blocker win98 ?

  • Thread starter Thread starter Andreas Perfora’tus [Stu]
  • Start date Start date
A

Andreas Perfora’tus [Stu]

Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up. Is there a way to block their entire
IP ranges? I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!


Any help or suggestions would be greatly appreciated.
 
Does anyone know of a way to block an entire range of ip address in win98?
Click to expand...
<snip>

Kerio Personal Firewall or any IP blocking firewall will do the trick
I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up.
Click to expand...

Not sure why Proxomitron alone can't handle the Gator pop-ups? Maybe it's
an issue with the filters you are using (not using)?

I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!
Click to expand...

I think it would be worth your time to figure out DNSKong. It's a great
app.

For some insight into Proxomitron, Kerio, and DNSKong, check Sponge's site.
I used Kerio and Proxomitron long before discovering the site, but he did
turn me on to DNSKong. Also, his efforts in supplying lists of IP addresses
/ domain names to block definitely saves a lot of time since you don't have
to do the research yourself.

Sponge and his devotees frequent the alt.privacy.spyware group.
His site is: http://www.geocities.com/yosponge/

For more Proxo configs, try: http://www.jd5000.net/
 
Andreas Perfora'tus said:
Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up. Is there a way to block their entire
IP ranges? I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!


Any help or suggestions would be greatly appreciated.
Click to expand...

The worst of it is that if you use IE the wreched gator
plug ins are always downloaded BEFORE you are
asked if you want them installed.
(VERY STUPID MICROSOFT!!!)

One Solution if your using IE is to set the kill bit for gator
activex components, this marks these components as unsafe
which seems appropriate, this both stops the annoying
"Always trust Gator..." box and it stops them being downloaded.

If you have a copy of Xteq X-Setup, Theres a X-setup plugin
available from my website to block any activex component
if you know the ClassID (gator is built in)
http://freespace.virgin.net/mel.sage/tweaks/mel ieactivex.xpl

alternatively you could probably do something with proxomitron
(can't help - don't use it) - but the ClassIDs you need to block are -

{4006e7b2-0fb2-4345-b388-083b138e80af}
{54e7e082-1da6-412e-96b5-c290fcef5329}


hope that helps

Mel.
 
Mel said:
The worst of it is that if you use IE the wreched gator
plug ins are always downloaded BEFORE you are
asked if you want them installed.
(VERY STUPID MICROSOFT!!!)
Click to expand...

Gator will *NOT* be automatically downloaded if:

In IE: Tools > Internet Options > Security > Internet > Custom Level > Under
"Download Signed ActiveX Controls" check 'Prompt'.... Under "Download
Unsigned ActiveX Controls" check 'Disable' ....Under "Initialize and script
ActiveX controls not marked as safe" check 'Disable' > OK

Who's stupid now?
 
Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!
Click to expand...
First, I would try placing the gator address in the restricted sites
zone in IE and then change settings to "disable" on anything related
to Active X.

If that doesn't work, you could use the host file to block those
domains. The host file option is a little more difficult but has the
advantage that it works in all internet applications not just IE.
Here's a page with more info.

http://www.ecst.csuchico.edu/~atman/spam/adblock.shtml



_________
Suzanne
 
Jordan said:
Where does it download it to?

SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
and Spybot http://security.kolla.de/ will also set a kill bit for Gator.
Click to expand...
I'm sure they do a great job
(neither existed when I wrote my original script)

The gator cab file is stuffed in the temporary internet files
(as, if I recall correctly is any other IE download before
it is copied to the final destination).

Typical path
C:\WINDOWS\Temporary Internet Files\Content.IE5\ ....

It's not a particularly big cab file unlike shockwave or flash,
but it is an unnecessary download.

A never trust content from xxx as suggested by the OP
would be a very desirable feature.

Setting Kill bits can also be accomplished manually see

http://support.microsoft.com/default.aspx?scid=KB;en-us;q240797

Gator could also be killed by using a registry merge file
Although one really should back up the Activex Compatibility
keys if you do it this way.

VERY first line must be Regedit4 last line must be blank
(save as killgator.reg)
Important - ensure lines are not broken by mail reader

REGEDIT4
;
;
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{4006e7b2-0fb2-4345-b388-083b138e80af}]
"Compatibility Flags"=dword:00000400

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{54e7e082-1da6-412e-96b5-c290fcef5329}]
"Compatibility Flags"=dword:00000400

; end
 
On Mon, 07 Jul 2003 21:32:39 GMT, Andreas Perfora’tus [Stu] wrote:

From what I can tell, NeoWatch will block individual IP's, but not a whole
block or range - unless I specify each and every one from x.x.x.0-
x.x.x.255. Not really what I'd like to spend the next week doing. :)
Click to expand...

If NeoWatch can do network masks, you're in good shape. If not, it's not a
task you'd want to mess with, for sure. Kerio (and other free firewalls
like Sygate) allow several IP blocking options, such as:

Single address
Network Mask
Network Range

Here's what I have in Kerio for my Gator blocks (culled from one of
Sponge's lists):

204.238.120.0 / 255.255.255.0
64.162.206.0 / 255.255.255.0
64.94.89.0 / 255.255.255.0
63.197.87.0 / 255.255.255.0
216.30.17.0 / 255.255.255.0
208.184.198.0 / 255.255.255.0
216.141.76.128/ 255.255.255.248
66.35.248.0 / 255.255.254.0
66.35.229.0 / 255.255.255.0
64.152.73.0 / 255.255.255.0
Thanks kindly for the links to Sponge's site. I will definitely persist
with DNSKong as it does seem to be ideal. Thanks very much for the
assistance.
Click to expand...

You're welcome.
 
Andreas said:
Does anyone know of a way to block an entire range of ip address in
win98? In particular I am sick and tired of the "Do you want to
download, install and run Gator Corp" boxes. Why is it there is only
an option to "Always trust content from Gator" and not a check box to
"NEVER" trust gator? Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but
can't seem to stop Gator boxes from popping up. Is there a way to
block their entire IP ranges? I saw/tried dnsKong, but couldn't
figure the dang thing out. I got 404 errors on their documentation
links. Argh!


Any help or suggestions would be greatly appreciated.
Click to expand...

you can do all that by simply editing your hosts file. This is the simplest
way of blocking all ad windows and install popups. Saves a lot of network
bandwidth too.
See this tutorial
http://www.accs-net.com/hosts/what_is_hosts.html
Slightly long tutorial, but really helpful.
Sanjay
 
Setting Kill bits can also be accomplished manually see

http://support.microsoft.com/default.aspx?scid=KB;en-us;q240797

Gator could also be killed by using a registry merge file
Although one really should back up the Activex Compatibility
keys if you do it this way.

VERY first line must be Regedit4 last line must be blank
(save as killgator.reg)
Important - ensure lines are not broken by mail reader

REGEDIT4
;
;
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{4006e7b2-0fb2-4345-b388-083b138e80af}] "Compatibility
Flags"=dword:00000400

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{54e7e082-1da6-412e-96b5-c290fcef5329}] "Compatibility
Flags"=dword:00000400

; end
Click to expand...

Thank you kindly for the info, links, and .reg file. Much appreciated. :)
 
Here's what I have in Kerio for my Gator blocks (culled from one of
Sponge's lists):

204.238.120.0 / 255.255.255.0
64.162.206.0 / 255.255.255.0
64.94.89.0 / 255.255.255.0
63.197.87.0 / 255.255.255.0
216.30.17.0 / 255.255.255.0
208.184.198.0 / 255.255.255.0
216.141.76.128/ 255.255.255.248
66.35.248.0 / 255.255.254.0
66.35.229.0 / 255.255.255.0
64.152.73.0 / 255.255.255.0


You're welcome.
Click to expand...

Perhaps I'll switch over to Kerio. I tested it out a few weeks back but
didn't stick with it. I prefered Neowatch (been using it for a long time
now) as Kerio started asking me about all the different connections and if
I wanted to allow them. Seemed like a hassle at the time. You know, "if it
works fine why change it" kind of thing.

Thanks for the list of ip ranges, though. Will be very handy, no doubt.
Thanks again. :)
 
Excellent info. Thanks kindly. :)
Click to expand...

Hi Stu ;)

You might want to check alt.privacy.spyware for more info on all this.
Sponge frequents that group. He is always very helpful.


younggod
 
Back
Top