Dukun Cabul Posted July 9, 2017 Share Posted July 9, 2017 1 minute ago, Undertaker said: Looks like Kaspersky have fixed the firewall bug they had long ago, where if you created application filter rules and updated the installation with a new build, it would reset the filter rules. But as per @Dukun Cabul testing that is not happening now. FYI, if I block at system level..... I must block Local addresses too .... otherwise it will failed Link to comment Share on other sites More sharing options...
Undertaker Posted July 9, 2017 Share Posted July 9, 2017 Just now, Dukun Cabul said: FYI, if I block at system level..... I must block Local addresses too .... otherwise it will failed That should not be happening. The Curious Case of Kasperky Link to comment Share on other sites More sharing options...
dcs18 Posted July 9, 2017 Author Share Posted July 9, 2017 12 minutes ago, Undertaker said: Looks like Kaspersky have fixed the firewall bug they had long ago, where if you created application filter rules and updated the installation with a new build, it would reset the filter rules. But as per @Dukun Cabul testing that is not happening now. Kaspersky fixed nothing — the firewall most probably already had anti-DNS spoofing and ARP cache poisoning capabilities (if what Dukun Cabul claims turns out to be true.) Link to comment Share on other sites More sharing options...
Togijak Posted July 9, 2017 Share Posted July 9, 2017 4 hours ago, hamanokaito said: User account limited administrator privileges. So you can't use trialreset or fix with administrator. thx and at Windows and al that tools for surfing | Now I am angry enough to start a hard work - setup a dual boot system with Windows for some tools there are not present under Linux and Ubuntu to go online Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 9, 2017 Share Posted July 9, 2017 34 minutes ago, Undertaker said: That should not be happening. You are right ... I just did a test on 2nd PC Win 8.1 Pro Blocked at system level I deleted/unblocked Local addresses and nothing happened ( it happened on 1st PC Win 10 Pro yesterday) Gonna test again on 1st PC Link to comment Share on other sites More sharing options...
dcs18 Posted July 9, 2017 Author Share Posted July 9, 2017 32 minutes ago, Undertaker said: 33 minutes ago, Dukun Cabul said: FYI, if I block at system level..... I must block Local addresses too .... otherwise it will failed That should not be happening. The Curious Case of Kasperky Strange and truly commendable that Kaspersky is able to retain the IDM activation state despite being configured rather loosely with limited local addresses instead of All (which I hinted at, earlier.) Link to comment Share on other sites More sharing options...
Undertaker Posted July 9, 2017 Share Posted July 9, 2017 19 minutes ago, dcs18 said: Strange and truly commendable that Kaspersky is able to retain the IDM activation state despite being configured rather loosely with limited local addresses instead of All (which I hinted at, earlier.) Agree with you. @Dukun Cabul On a second and much closer look, that configuration is made all wrong by those local addresses. Infact, your IDM should have lost its registration going by that rule. I suspect your system has some other protection which kept IDM activation intact. 1 hour ago, Dukun Cabul said: 5, Visit IDM home page - download ....... blocked When on an application level protection, you should be able to visit and download the IDM setup from official site. Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 9, 2017 Share Posted July 9, 2017 @Undertaker This is my last test ..... I'm exhausted Blocking IPs at system level (Packet Rule) with KIS 1. Remove KIS firewall rule for IDM 2. Make system contaminated (LOL) 3. Check registry and found 2 CLSID keys, one has MData value (6DD...) 4. Keep the system contaminated in order to make it harder to fix 5. Configure packet rule, block Remote addresses only 6. Open IDM ...... Blocked with Fake serial notification 7. Visit IDM homepage ..... blocked 8. Run IDM_AIO.bat and performed empty CLSID key check (I suspected this is the secret weapon ) 9. Open IDM .... Successful and Registered 10. Run IDM quick updates .... blocked 11. Visit IDM homepage .... blocked 12. Accessing following URLs .... blockedhttp://50.97.82.44/idman628build15.exehttp://50.97.82.44/commerce/2odlksMSLPFNW84503ksu99vnwud/idman628build15f.exehttp://50.97.82.44/updates/dfghrtv3465773FRJD843dedhx250dlAsb/idmupdt.exe 13. Download multiple files .... successful no issue 14. Turn Off/On IDM ... no issue 15. Restart system + launch IDM on startup .... no issue 16. Turn Off/On PC + launch IDM on startup .... no issue 17. Download another files again ..... successful no issue RESULT Gonna take a nap now Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 9, 2017 Share Posted July 9, 2017 For those who think I'm a liar Check this out Link to comment Share on other sites More sharing options...
Undertaker Posted July 9, 2017 Share Posted July 9, 2017 5 minutes ago, Dukun Cabul said: For those who think I'm a liar Check this out @Dukun Cabul Sorry if you felt this way, but I was just telling the way, the firewall should have responded. Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 9, 2017 Share Posted July 9, 2017 11 minutes ago, Undertaker said: @Dukun Cabul Sorry if you felt this way, but I was just telling the way, the firewall should have responded. I was just kidding bro Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 10, 2017 Share Posted July 10, 2017 19 hours ago, Undertaker said: When on an application level protection, you should be able to visit and download the IDM setup from official site. I modded the rule to meet your needs Check it out Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 44 minutes ago, Dukun Cabul said: I modded the rule to meet your needs Check it out I didn't tell to delete IPs for accessing IDM homepage. And when I said you should be able to download IDM setup, I meant in the browser not through IDM. The testing was incomplete but let it be. Link to comment Share on other sites More sharing options...
Dukun Cabul Posted July 10, 2017 Share Posted July 10, 2017 31 minutes ago, Undertaker said: I didn't tell to delete IPs for accessing IDM homepage. And when I said you should be able to download IDM setup, I meant in the browser not through IDM. The testing was incomplete but let it be. OK then, ATM I prefer to use my current configuration ....... Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 Just tested KIS 19.0.0.417 build Exclusive IP blocking at application level is working. Upgrades between builds went smoothly(looks like the age old problem of forgetting rules when updating versions is gone). Point to be bragged:- Adguard IP filtering was still faster than KIS blocking, had to disable Adguard first @dcs18 Link to comment Share on other sites More sharing options...
dcs18 Posted July 10, 2017 Author Share Posted July 10, 2017 On 6/30/2017 at 8:40 PM, Undertaker said: But these are only a few sites, I thought you were gonna do a more generalized tutorial focussing on adblockers rather than sites. And meanwhile, mention something about uBlock also since you are using it now. Just now, Undertaker said: Point to be bragged:- Adguard IP filtering was still faster than KIS blocking, had to disable Adguard first @dcs18 When I try to draft my (ad. blocking) tutorial points, it becomes increasingly evident that the body of the matter is turning out all the same when it comes to mainstream blockers like uBlock and AdBlock Plus. However, with uMatrix in the picture, the equation takes a totally different turn — unfortunately though, if I plan-out a uMatrix tutorial, it's gonna consume a lot of my time (little wonder the Author himself, avoids this subject.) Point here, (if just application level is taken into consideration,) it's between Adguard and uMatrix — you might want to test-out my words. Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 3 minutes ago, dcs18 said: Point here, (if just application level is taken into consideration,) it's between Adguard and uMatrix — you might want to test-out my words. Standalone, Adguard trumps uMatrix I still want that tutorial no matter what, I'm sure I will learn some new things. Link to comment Share on other sites More sharing options...
dcs18 Posted July 10, 2017 Author Share Posted July 10, 2017 Just now, Undertaker said: Standalone, Adguard trumps uMatrix Unless I personally test out both on a apple-to-apple basis, wouldn't be in such a haste to jump to conclusions. There was this interesting moment when I was witness to a brief encounter between the Developers of uMatrix and Adguard — it went well though and (if I remember right,) ended-up with them; praising each other. Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 3 minutes ago, dcs18 said: Unless I personally test out both on a apple-to-apple basis, wouldn't be in such a haste to jump to conclusions. There was this interesting moment when I was witness to a brief encounter between the Developers of uMatrix and Adguard — it went well though and (if I remember right,) ended-up with them; praising each other. Yeah, they have been woking in collaboration on things, gorhill would eventually be adding Adguard's list as default replacing easylists. But standalone program as against the extension is out of comparison. Since 2014, have been telling you to atleast try Adguard once. It's not like I haven't tried uMatrix, but you need extensions together with it(like an adblocker) to work fully. I am just happy with my single Adguard program Link to comment Share on other sites More sharing options...
dcs18 Posted July 10, 2017 Author Share Posted July 10, 2017 Just now, Undertaker said: It's not like I haven't tried uMatrix, but you need extensions together with it(like an adblocker) to work fully. Nah, for most effective purposes, it can be used as a standalone — the only drawback would be a lack of element-hiding and loss of granularity when it comes to selectively allow/block from among the same genre. When it comes to granularity between different genre though, nothing comes finer than uMatrix. In fact, when I started learning uMatrix there was a conscious effort made to remove all other forms of blocking (including the ones built into Firefox.) 7 minutes ago, Undertaker said: Since 2014, have been telling you to atleast try Adguard once. The stumbling block (for me) has always been deployment to hundreds of client machines. Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 2 minutes ago, dcs18 said: the only drawback would be a lack of element-hiding and loss of granularity when it comes to selectively allow/block from among the same genre. This is the main deal beaker for me and potentially for uMatrix as well. As most of the sites are now adding scripts on their own as first-party and under their own domain ambit. Noticed this recently(like 2-3 months back) on Ice Frog's PC where it failed. Then I tried it on my PC and it failed here too. Link to comment Share on other sites More sharing options...
dcs18 Posted July 10, 2017 Author Share Posted July 10, 2017 31 minutes ago, Undertaker said: 37 minutes ago, dcs18 said: the only drawback would be a lack of element-hiding and loss of granularity when it comes to selectively allow/block from among the same genre. When it comes to granularity between different genre though, nothing comes finer than uMatrix. This is the main deal beaker for me and potentially for uMatrix as well. As most of the sites are now adding scripts on their own as first-party and under their own domain ambit. Noticed this recently(like 2-3 months back) on Ice Frog's PC where it failed. Then I tried it on my PC and it failed here too. I want examples with links — uMatrix has never known to have failed on my system (worse comes to worse, it blocks more than the average Joe would like — however, that's exactly what I look forward to . . . . . . 0-day prevention.) ATM, my deployment (uMatrix only) protects clients from more than 99% of porno stuff from rendering (even from sites that haven't yet been created) and any other present form of malvertising. Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 1 hour ago, dcs18 said: I want examples with links — uMatrix has never known to have failed on my system (worse comes to worse, it blocks more than the average Joe would like — however, that's exactly what I look forward to . . . . . . 0-day prevention.) ATM, my deployment (uMatrix only) protects clients from more than 99% of porno stuff from rendering (even from sites that haven't yet been created) and any other present form of malvertising. But your system is protected at multiple levels. That won't be pure testing. Give me your uMatrix Configuration, I'll try. Link to comment Share on other sites More sharing options...
dcs18 Posted July 10, 2017 Author Share Posted July 10, 2017 2 minutes ago, Undertaker said: But your system is protected at multiple levels. That won't be pure testing. The 1st part about multi-level protection is true — however, my implementation does not allow for overlap between different levels. 2 hours ago, Undertaker said: Noticed this recently(like 2-3 months back) on Ice Frog's PC where it failed. 2 minutes ago, Undertaker said: Give me your uMatrix Configuration, I'll try. A rattle-snake won't employ the same tame & lame config. as a frog — now . . . . . . would he? Check your PM for my uMatrix config . . . . . . after some time. Link to comment Share on other sites More sharing options...
Undertaker Posted July 10, 2017 Share Posted July 10, 2017 Just now, dcs18 said: The 1st part about multi-level protection is true — however, my implementation does not allow for overlap between different levels. A rattle-snake won't employ the same tame & lame config. as a frog — now . . . . . . would he? Check your PM for my uMatrix config . . . . . . after some time. He used uBlock and uMatrix configuration like you and then he encountered the site. And I introduced him to Adguard. I say true testing because here we are comparing standalones uMatrix and Adguard. I remember how PLP protects you even from IDM nags. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.