freeware ip blocker win98 ?

[Andreas Perfora’tus [Stu]]

Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up. Is there a way to block their entire
IP ranges? I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!


Any help or suggestions would be greatly appreciated.

 

[*** **]

Does anyone know of a way to block an entire range of ip address in win98?

<snip>

Kerio Personal Firewall or any IP blocking firewall will do the trick

I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up.

Not sure why Proxomitron alone can't handle the Gator pop-ups? Maybe it's
an issue with the filters you are using (not using)?

I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!

I think it would be worth your time to figure out DNSKong. It's a great
app.

For some insight into Proxomitron, Kerio, and DNSKong, check Sponge's site.
I used Kerio and Proxomitron long before discovering the site, but he did
turn me on to DNSKong. Also, his efforts in supplying lists of IP addresses
/ domain names to block definitely saves a lot of time since you don't have
to do the research yourself.

Sponge and his devotees frequent the alt.privacy.spyware group.
His site is: http://www.geocities.com/yosponge/

For more Proxo configs, try: http://www.jd5000.net/

 

[Mel]

Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but can't seem
to stop Gator boxes from popping up. Is there a way to block their entire
IP ranges? I saw/tried dnsKong, but couldn't figure the dang thing out. I
got 404 errors on their documentation links. Argh!


Any help or suggestions would be greatly appreciated.

The worst of it is that if you use IE the wreched gator
plug ins are always downloaded BEFORE you are
asked if you want them installed.
(VERY STUPID MICROSOFT!!!)

One Solution if your using IE is to set the kill bit for gator
activex components, this marks these components as unsafe
which seems appropriate, this both stops the annoying
"Always trust Gator..." box and it stops them being downloaded.

If you have a copy of Xteq X-Setup, Theres a X-setup plugin
available from my website to block any activex component
if you know the ClassID (gator is built in)
http://freespace.virgin.net/mel.sage/tweaks/mel ieactivex.xpl

alternatively you could probably do something with proxomitron
(can't help - don't use it) - but the ClassIDs you need to block are -

{4006e7b2-0fb2-4345-b388-083b138e80af}
{54e7e082-1da6-412e-96b5-c290fcef5329}


hope that helps

Mel.

 

[Jordan]

The worst of it is that if you use IE the wreched gator
plug ins are always downloaded BEFORE you are
asked if you want them installed.
(VERY STUPID MICROSOFT!!!)

Gator will *NOT* be automatically downloaded if:

In IE: Tools > Internet Options > Security > Internet > Custom Level > Under
"Download Signed ActiveX Controls" check 'Prompt'.... Under "Download
Unsigned ActiveX Controls" check 'Disable' ....Under "Initialize and script
ActiveX controls not marked as safe" check 'Disable' > OK

Who's stupid now?

 

[Suzanne]

Does anyone know of a way to block an entire range of ip address in win98?
In particular I am sick and tired of the "Do you want to download, install
and run Gator Corp" boxes. Why is it there is only an option to "Always
trust content from Gator" and not a check box to "NEVER" trust gator?
Stupid MicroSoft!!

First, I would try placing the gator address in the restricted sites
zone in IE and then change settings to "disable" on anything related
to Active X.

If that doesn't work, you could use the host file to block those
domains. The host file option is a little more difficult but has the
advantage that it works in all internet applications not just IE.
Here's a page with more info.

http://www.ecst.csuchico.edu/~atman/spam/adblock.shtml



_________
Suzanne

 

[Andreas Perfora’tus [Stu]]

Get the freeware versioins of Ad-aware and EasyCleaner. DL install,
run and reboot. That should take care of things.
http://www.lavasoftusa.com/

http://www.toniarts.com/index.htm

HTH
Helen

Thanks, already have and use them. And I don't any Gator junk installed. I
just keep getting the annoying box pop up on the odd web page or two asking
me if I'd like to install any of it. As if!

 

[Jordan]

Funny enough that's EXACTLY the settings I already use.
Without the kill bit set IE downloads Gator but does not
execute it.

Mel

Where does it download it to?

SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
and Spybot http://security.kolla.de/ will also set a kill bit for Gator.

 

[Mel]

Where does it download it to?

SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
and Spybot http://security.kolla.de/ will also set a kill bit for Gator.

I'm sure they do a great job
(neither existed when I wrote my original script)

The gator cab file is stuffed in the temporary internet files
(as, if I recall correctly is any other IE download before
it is copied to the final destination).

Typical path
C:\WINDOWS\Temporary Internet Files\Content.IE5\ ....

It's not a particularly big cab file unlike shockwave or flash,
but it is an unnecessary download.

A never trust content from xxx as suggested by the OP
would be a very desirable feature.

Setting Kill bits can also be accomplished manually see

http://support.microsoft.com/default.aspx?scid=KB;en-us;q240797

Gator could also be killed by using a registry merge file
Although one really should back up the Activex Compatibility
keys if you do it this way.

VERY first line must be Regedit4 last line must be blank
(save as killgator.reg)
Important - ensure lines are not broken by mail reader

REGEDIT4
;
;
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{4006e7b2-0fb2-4345-b388-083b138e80af}]
"Compatibility Flags"=dword:00000400

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX Compatibility\{54e7e082-1da6-412e-96b5-c290fcef5329}]
"Compatibility Flags"=dword:00000400

; end

 

[*** **]

On Mon, 07 Jul 2003 21:32:39 GMT, Andreas Perfora’tus [Stu] wrote:

From what I can tell, NeoWatch will block individual IP's, but not a whole
block or range - unless I specify each and every one from x.x.x.0-
x.x.x.255. Not really what I'd like to spend the next week doing.

If NeoWatch can do network masks, you're in good shape. If not, it's not a
task you'd want to mess with, for sure. Kerio (and other free firewalls
like Sygate) allow several IP blocking options, such as:

Single address
Network Mask
Network Range

Here's what I have in Kerio for my Gator blocks (culled from one of
Sponge's lists):

204.238.120.0 / 255.255.255.0
64.162.206.0 / 255.255.255.0
64.94.89.0 / 255.255.255.0
63.197.87.0 / 255.255.255.0
216.30.17.0 / 255.255.255.0
208.184.198.0 / 255.255.255.0
216.141.76.128/ 255.255.255.248
66.35.248.0 / 255.255.254.0
66.35.229.0 / 255.255.255.0
64.152.73.0 / 255.255.255.0

Thanks kindly for the links to Sponge's site. I will definitely persist
with DNSKong as it does seem to be ideal. Thanks very much for the
assistance.

You're welcome.

 

[Sanjay Goel]

Does anyone know of a way to block an entire range of ip address in
win98? In particular I am sick and tired of the "Do you want to
download, install and run Gator Corp" boxes. Why is it there is only
an option to "Always trust content from Gator" and not a check box to
"NEVER" trust gator? Stupid MicroSoft!!

I'm running win98se, with neowatch firewall and proxomitron, but
can't seem to stop Gator boxes from popping up. Is there a way to
block their entire IP ranges? I saw/tried dnsKong, but couldn't
figure the dang thing out. I got 404 errors on their documentation
links. Argh!


Any help or suggestions would be greatly appreciated.

you can do all that by simply editing your hosts file. This is the simplest
way of blocking all ad windows and install popups. Saves a lot of network
bandwidth too.
See this tutorial
http://www.accs-net.com/hosts/what_is_hosts.html
Slightly long tutorial, but really helpful.
Sanjay

 

[Andreas Perfora’tus [Stu]]

Setting Kill bits can also be accomplished manually see

http://support.microsoft.com/default.aspx?scid=KB;en-us;q240797

Gator could also be killed by using a registry merge file
Although one really should back up the Activex Compatibility
keys if you do it this way.

VERY first line must be Regedit4 last line must be blank
(save as killgator.reg)
Important - ensure lines are not broken by mail reader

REGEDIT4
;
;
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{4006e7b2-0fb2-4345-b388-083b138e80af}] "Compatibility
Flags"=dword:00000400

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\ActiveX
Compatibility\{54e7e082-1da6-412e-96b5-c290fcef5329}] "Compatibility
Flags"=dword:00000400

; end

Thank you kindly for the info, links, and .reg file. Much appreciated.

 

[Andreas Perfora’tus [Stu]]

Here's what I have in Kerio for my Gator blocks (culled from one of
Sponge's lists):

204.238.120.0 / 255.255.255.0
64.162.206.0 / 255.255.255.0
64.94.89.0 / 255.255.255.0
63.197.87.0 / 255.255.255.0
216.30.17.0 / 255.255.255.0
208.184.198.0 / 255.255.255.0
216.141.76.128/ 255.255.255.248
66.35.248.0 / 255.255.254.0
66.35.229.0 / 255.255.255.0
64.152.73.0 / 255.255.255.0


You're welcome.

Perhaps I'll switch over to Kerio. I tested it out a few weeks back but
didn't stick with it. I prefered Neowatch (been using it for a long time
now) as Kerio started asking me about all the different connections and if
I wanted to allow them. Seemed like a hassle at the time. You know, "if it
works fine why change it" kind of thing.

Thanks for the list of ip ranges, though. Will be very handy, no doubt.
Thanks again.

 

[Andreas Perfora’tus [Stu]]

you can do all that by simply editing your hosts file. This is the
simplest way of blocking all ad windows and install popups. Saves a
lot of network bandwidth too.
See this tutorial
http://www.accs-net.com/hosts/what_is_hosts.html
Slightly long tutorial, but really helpful.
Sanjay

Excellent info. Thanks kindly.

 

[younggod]

Excellent info. Thanks kindly.

Hi Stu

You might want to check alt.privacy.spyware for more info on all this.
Sponge frequents that group. He is always very helpful.


younggod