| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
 |
World Community Grid Forums
Category: Retired Forums
Forum: UD Windows Agent Support [Read Only]
Thread: Blocked by ProtoWall |
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 11
|
|
| Author |
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
I´ve just found out that WCG can´t be run toghether with ProtoWall without some modification of the latter´s blocklist. To run WCG I had to disable PW, which displayed several attempts at outbound communication with two IP:s. Some clarification would not be out of place here. Why would those IP:s be in the blocklist in the first place (allegedly "IBM Schaumburg", which looks plausible, and the not-so-plausible "Mimos BHD, UN High Commissioner Refugees something", with a Malaysian ISP)? Why would there be a need for outbound communication with any them? I believe we all agree that irrelevant communication cannot be tolerated, so I would really appreciate being enlightened on this issue.
|
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
I think Protowall, Peerguardian and a few more of these applications that automatically draw tables 'suspected' IP addresses, by default include pretty much all businesses, universities and other in their eyes 'suspect' institutions in the category 'Bogon' and 'Snoop'. With Router NAT and Firewall active (or software firewall), u would not need these. There are exceptions (Allow) that can be set. WCG maintains 2 IP addresses that cover the Website, and servers. Simply ping to find out for server.worldcommunitygrid.org and www.worldcommunitygrid.org. Since many projects run on University locations, dont be surprised if other projects are also blocked.
----------------------------------------As to the outbound communication, no idea what you are talking about. Occasionally the Hosting Service where the servers recide do a Yesterday found out that Host'It had my ISP listed as sitting in Damascus Syria.... well it's never been there, so dont rely too much on where an IP is unless u use a trustworthy source. Added: The discussion is not new: See Here for a post on the matter dated March '06.
WCG
----------------------------------------Please help to make the Forums an enjoyable experience for All! [Edit 5 times, last edit by Sekerob at Feb 26, 2007 3:44:17 PM] |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Thank you for your quick reply. Yeah, a little more research on my part shows that both those IP:s might be legitimate (one belonging to a Malaysian company with a rather eclectic set of IT products, grid computing software being one of them). I also read the older thread and, well, it's all very well for users of PG. With PW you have to plead for exclusion from the generic blocklist, find another without the IP:s in question (which you probably won't) or exclude them manually after every update. Well, heck, people have suffered far worse for the cause of science.
|
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
Get to be connected to a trusted DNS server too and switch off the DNS caching in your OS. The new fad... DNS cache pollution.... Visit www.dnsstuff.com and type an IP in WHOis and find out the real owner.
----------------------------------------
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
Alther
Former World Community Grid Tech United States of America Joined: Sep 30, 2004 Post Count: 414 Status: Offline Project Badges: 
|
I´ve just found out that WCG can´t be run toghether with ProtoWall without some modification of the latter´s blocklist. To run WCG I had to disable PW, which displayed several attempts at outbound communication with two IP:s. Some clarification would not be out of place here. Why would those IP:s be in the blocklist in the first place (allegedly "IBM Schaumburg", which looks plausible, and the not-so-plausible "Mimos BHD, UN High Commissioner Refugees something", with a Malaysian ISP)? Why would there be a need for outbound communication with any them? I believe we all agree that irrelevant communication cannot be tolerated, so I would really appreciate being enlightened on this issue. Outbound communication is required to upload results to the server (server.worldcommunitygrid.org - currently IP 129.33.89.134). Other than uploading these results, there is NO other outbound activity. As part of our standard security scan of the code, all applications we run on the grid have their networking code removed or disabled (if they have any at all), so they won't be calling home either.
Rick Alther
Former World Community Grid Developer |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
I know, I know, just didn´t realize IBM was at the core of it all. ARIN told me. They would have to be, right? And how about that Malaysian company (got them from APNIC), what's their interest in WCG?
|
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
check:
----------------------------------------http://www.dnsstuff.com/tools/whois.ch?ip=129.33.89.133 http://www.dnsstuff.com/tools/whois.ch?ip=129.33.89.134 As outlaid before, know who to trust.... that Malaysian ref i saw in PG when checking on the PW/PG listings....same as Damascus, Syria...
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Okay, but I don't quite follow. Do you mean to tell me that the APNIC information on IP 202.190.134.59 actually is bogus, or that this Mimos BHD just happens to be the ISP also of some bad guy (aren´t they all)? In the first case,all right, I can´t trust APNIC (nor ARIN nor RIPE, consequently) and in the second case the question remains: How did the bad guy get into this? Mind you, this ain't a big thing, I just want to make sure, as I actually feel some moral obligation to put part of my surplus computer capacity to purposeful use and WCG is exactly the right thing, so I'm rather anxious to keep things neat and uncorrupted.
|
||
|
|
Alther
Former World Community Grid Tech United States of America Joined: Sep 30, 2004 Post Count: 414 Status: Offline Project Badges:
|
I know, I know, just didn´t realize IBM was at the core of it all. ARIN told me. They would have to be, right? And how about that Malaysian company (got them from APNIC), what's their interest in WCG? What Malaysian company are you talking about and what makes you think they're associated with WCG? How are you tracing the outbound communication back to the process?
Rick Alther
Former World Community Grid Developer |
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
Presume it to be this one noted in a few posts up: http://www.dnsstuff.com/tools/whois.ch?ip=202.190.134.59
----------------------------------------
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
|