PtokaX forum

Stuff => Offtopic => Topic started by: Madman on 18 November, 2004, 13:46:45

Title: New Evil Dc...
Post by: Madman on 18 November, 2004, 13:46:45
New Dc out LixDc
http://www.dcdb.net/Lix/

Where is the dc spirit?
Share! Share! Share!

Title:
Post by: blackwings on 18 November, 2004, 14:22:08
hmm, for me it wont work, so I can't see how you maybe stop these clients :P

Is it like MoGLO that the username always has the word search?

Or maybe it enters and search in the hub like a hub flooder, then plop might be able to find a way to stop this new evil client.
Title:
Post by: Madman on 18 November, 2004, 15:16:29
i cant get it to work either... lets hope some does, and can gives us info on how to block it.... hoppfully anti moglo should be enough.... =)
Title:
Post by: blackwings on 19 November, 2004, 07:35:30
It seems like if I understand the screenshot correctly, lixDC works like this:

1) You chose to search for something
2) LixDc then connect to lots of hubs and search for the things you wanted. And then it close the connection
3) You choose to dl some of the file in the result,
4) LixDC then connect again to those hub with the users that share the file that you wanted to dl is.
5) LixDC starts the downloads and then close the connection to the hubs.

I believe this can be prevented by choosing the advance option in your DC client and choose to close the uploads of users that leaves the hub.

The problem with that is that the option isn't enable by default and many users doesn't enable it. And I don't think that you can by script close uploads a user does when he exit the hub or force users to enable that advance setting function.

Someone must really investigate how you could stop this new evil client.

One wierd thing I noticed, is that it seems like when you use LixDC, you must connect to a server. Why do that? But there is also a scary version of this whole thing is. It might be a dirty trick made by anti-p2p companies to catch people by logging their activities.

I made a WhoIs on the IP to the site and it seems to belong to a normal costumers IP range, but I have heard stories with anti-p2p companies use those IP ranges to.

Anyway, if the LixDC users must connect to the server for it to work, then we can simple just block the IP to this site and then keep track of any IP changes it might get. Well, it's a temprary solution of the problem :P
(another thing that points to that LixDC might only work if you connect to the server is to check the forum there. A user has posted that he can't get LixDC to work because he can't connect to the server(the link to the forum can be found on the page))
Title:
Post by: Madman on 19 November, 2004, 09:38:09
Well, my guess about the server, is that it has some kind of client there log in to the hubs since, you dont write any nick....

Another theroy is that email, you write in the beging, will be your nick... if so... it is just to block @ in the nick

This is just guesses.... hopefully someone will get it to work, and can provide info about how to block it....
Title:
Post by: blackwings on 19 November, 2004, 12:49:10
here is how you solve the problem with running it (I think you have the same problem as me Madman) =
http://forum.dcdb.net/cgi-bin/UBB/ultimatebb.cgi?ubb=get_topic;f=1;t=000005

At the moment I can't fix so I can check LixDC, but I hope you can do it.
Title:
Post by: Quattro on 19 November, 2004, 15:29:03
Spaceboy
Wannabie Member
Member # 6

Rate Member   posted November 12, 2004 04:27                      
--------------------------------------------------------------------------------
I'm having problems downloading anything. Everytime I try to download something I get the following message:

Could not find specified server/user for file-transfer.
--------------------------------------------------------------------------------
Posts: 1  |  IP: Logged |  
 
administrator
Administrator
Member # 1

Rate Member   posted November 12, 2004 10:17                      
--------------------------------------------------------------------------------
That is most likely due to the remote hub not supporting remote transfers as Lix is designed for, these hubs are automaticly removed from the list so the proper hubs should give better quality over time.
--------------------------------------------------------------------------------
 
 
Looks like some hubs can allready block the client
Title:
Post by: blackwings on 19 November, 2004, 16:22:39
QuoteOriginally posted by Quattro
Rate Member   posted November 12, 2004 10:17                      
--------------------------------------------------------------------------------
That is most likely due to the remote hub not supporting remote transfers as Lix is designed for, these hubs are automaticly removed from the list so the proper hubs should give better quality over time.
--------------------------------------------------------------------------------
 
Looks like some hubs can allready block the client
I think it means that either yhub, verlihub or some other hubsoftware don't support "remote transfers", but ptokax do, I think, because you can still dl from someone even after exiting the hub.

we still need to get info like =
1) does LixDC have a certain DC tag?
2) does all LixDC users have a certain pattern in their users name
3) Does it enter by force? then deflood might already block it
4) Can OP clients or script see that LixDC users don't share anything, then a anti faker script might work against LixDC.

EDIT: Damn, does none of the elite scripters ever check the offtopic section :S
Title:
Post by: Optimus on 19 November, 2004, 16:47:44
Well i'm checking it but can't connect to anywhere because of that extended server it connect's to. The program is dead at my place lollll
Title:
Post by: ??????Hawk?????? on 19 November, 2004, 16:58:02
15:54:02 Connected to LixServer established.
15:54:02 Socket Error: Connection is aborted due to timeout or other failure
15:54:30 Trying to connect LixServer...
15:54:30 Connected to LixServer established.
15:54:30 Socket Error: Connection is aborted due to timeout or other failure
15:54:31 Trying to connect LixServer...
15:54:31 Connected to LixServer established.
15:54:31 Socket Error: Connection is aborted due to timeout or other failure

Not working here  .................
Title:
Post by: blackwings on 19 November, 2004, 17:40:52
heh, maybe the creator of lixDC server can't handle all those connections the lixDC users make :P or maybe even the ISP doesn't allow that he has that many connections :P

Anyway, the problem with connceting to the lixDC server might be temporary, the creator of lixDC might fix his server problems, so people should continue checking lixDC and find a possible way to block it.
Title:
Post by: Madman on 19 November, 2004, 20:33:43
I got the same problem as optimus and hawk...
but i'll keep trying....
Title:
Post by: plop on 19 November, 2004, 22:27:43
LixDC is bit like moglo.
but unlike moglo which connects 2 the hub itself it's the server who does the searching.
dcdb stands for dc database.
the server then tells which hub/user 2 download from.
blocking it can simply be done by blocking the server.
i need 2 try it out in a working state 2 see if ptokax supports this, and if so how 2 stop it (alltho a ip ban would do it faster).

plop
Title:
Post by: n1ck on 19 November, 2004, 22:57:01
Doesnt seem to work!
Title:
Post by: blackwings on 20 November, 2004, 08:23:56
QuoteOriginally posted by plop
LixDC is bit like moglo.
but unlike moglo which connects 2 the hub itself it's the server who does the searching.
dcdb stands for dc database.
the server then tells which hub/user 2 download from.
blocking it can simply be done by blocking the server.
i need 2 try it out in a working state 2 see if ptokax supports this, and if so how 2 stop it (alltho a ip ban would do it faster).

plop
I know for a fact that users from that ISP that the LixDC server use has dynamic IP for it's costumers, so that IP will change from time to time, so banning/blocking the IP isn't a absolute way to stop LixDC.

And even if we say that it's ok that we every day check if the IP to the server has changed and then block the new one, BUT it doesn't change the fact that ptokax has an security hole that needs to be closed. until the new ptokax release, we need to have a script that close this security hole.
Title:
Post by: blackwings on 20 November, 2004, 13:43:17
oh, opti,plop and hawk, you guys succed to start the program, so you would maybe know this=
Can the LixDc users choose any username they want or is there I forced pattern in the username, like madman said about that they maybe had email as username(because then you could just block all users that connect with @ in their username)?
Title:
Post by: Optimus on 20 November, 2004, 13:53:18
Starting Eighth Wonder LixDC v2.1-25... OK
13:52:20 Trying to connect LixServer...
13:52:21 Connected to LixServer established.
13:52:21 Authorization handhake...
13:52:21 Authorized OK.
13:52:21 Setting search-reply settings...
13:52:21 OK - Replies will be sent to 217.121.203.118:8500
13:52:21 Setting search limits...
13:52:22 OK - LixServer currently connected to 65 hubs.
13:52:22 Ready. All settings done.


wtf it's working suddenly hehe
Title:
Post by: Quattro on 20 November, 2004, 14:21:43
weird mine is working suddenly too  ?(
Title:
Post by: Quattro on 20 November, 2004, 14:26:12
This one doesn't tell you which hub he found the files
Title:
Post by: Madman on 20 November, 2004, 19:23:47
Mine did find some files....
searched on xxx ;p
tested the ips...

81.208.38.19 --yhub
213.113.191.88 --yhub
213.112.253.31 --yhub
82.182.34.69 --yhub
81.227.41.76 --timeout
Title:
Post by: ??????Hawk?????? on 20 November, 2004, 19:35:19
hmmm  works here too

i think this should maby be highlighted to the DEVs
and hopefully get them to to tick the

"Automaticly disconnect users that leave the hub "

As Default..

Also:-
QuoteThat is most likely due to the remote hub not supporting remote transfers as Lix is designed for, these hubs are automaticly removed from the list so the proper hubs should give better quality over time.

Can this be blocked  Hub side Maby PPK could add it to the next release of ptokax ???
Title:
Post by: blackwings on 20 November, 2004, 21:36:45
QuoteOriginally posted by ??????Hawk??????
QuoteThat is most likely due to the remote hub not supporting remote transfers as Lix is designed for, these hubs are automaticly removed from the list so the proper hubs should give better quality over time.
Can this be blocked  Hub side Maby PPK could add it to the next release of ptokax ???
agree, but before the new ptokax comes out, is it possible to block it through scripts (except IP blocking)?
Title:
Post by: Tarot on 21 November, 2004, 15:55:03
first the donky problem now this LixDC
so the scripters can make a script fore this LixDC i hoop
when LixDC spam the hubs like donky
Title:
Post by: Quattro on 24 November, 2004, 15:55:36
I believe the DEV's are ignoring the client  8o
Title:
Post by: plop on 25 November, 2004, 00:04:06
QuoteOriginally posted by Quattro
I believe the DEV's are ignoring the client  8o
no but it would be handy 2 have some info about how lixdc works.
all i know is that dcdb used 2 use a bot which fakeshared it's way into hub's 2 do the searching.
and aslong as i haven't seen any proof that lixdc works on ptokax hub's i feel a bit useless 2 make a script 2 block it.

plop
Title:
Post by: Quattro on 25 November, 2004, 12:56:11
Most of the hubs i found were yhub and some of the IP's don't point towards a hub it seems, i try to connect to them but it only says connecting.........

So it appears only yhub is affected
Title:
Post by: Madman on 25 November, 2004, 14:16:10
Same here.. it's yhubs... or refused... ;p
I think it uses the MoGlo...
So, I dont Think we have anything to worry about =)