eMule Users: stay aware of Spy Servers!

eMuleeMule, the famous file-sharing application, is not illegal, even if it’s illegal to use it to download copyrighted material.

Anyway, it’s worrying to be spyied while we’re using it, and this is a concrete risk: a lot of fake servers were born in the last months, they are hiding themselves near “normal” servers, logging what users are downloading or sharing. This is a procedure to exclude them from the list:

1. Enter eMule Options, ”Server” section, and set these functions like this picture (texts can vary depending from the language and the version of the client):

Filtro Anti Spy Emule 1

2. Go to “Security“, activate the “Filter servers too” option, paste this address into the “Update from URL” field and click on “Load“:
http://dialspace.dial.pipex.com/town/pipexdsl/s/ashu56/bluetack/level2.txt (this page is no more available)
(this is a spy-server list, frequently updated, by Bluetack, good eMule security site);

3. Now, click on the near “Edit” button: Notepad will start with, loaded inside, the filter file that we set; let’s scroll to the end of the text file and add (with simple copy/paste) the content of ”EneTec eMule IPFilter” Part1 and Part2, from the site www.emulesecurity.net (the “Part2″ file is distribuited in 2 versions, “Hi-performance” and “Hi-security”: you’ve to choose the one you prefer, as you can imagine the first one is more restrictive, but it will cause a small slowdown for performances of your eMule);

4. Save modifies and click on “Reload” button in eMule, still in ”Security” section. Then click on OK for the options.

5. The filter is now activated. A last tip to filter our actual server list, and to clean it: click on “Servers“, and then on a random server with the right mouse button, and choose “Remove All“. Now we’ve to paste, in the right column, after “Update server.met from URL” the address of one of the ready server lists, here there are someone of the most famous:
http://ocbmaurice.no-ip.org/slist/serverlist.html
http://ed2k.2×4u.de/index.html
Of course, a click on “Update” is needed. The fresh list will be loaded and it will be automatically filtered, excluding the fake servers.

The procedures to improve your security using eMule are many more, but the target of this little article is not so extended. My invite is to search with Google to go deeper, and to read the guides and the information checks from the sites that I highlighted in the article.

20 commenti

  1. intr3py said:

    nice article, very well written :)

  2. Walter said:

    Ciao Riccardo, senti non pensi che PeerGuardian2 possa risolvere tutti i tuoi problemi?
    http://phoenixlabs.org/pg2/

    Buona fortuna,

    -Walter

  3. riccardo said:

    intr3py:
    thank you very much and excuse me for my english, I’m italian and I translate posts from my blog daily ;)

    Walter:
    … anche ;) altro sistema ottimo per la sicurezza. Ovviamente il mio articolo è più ristretto a eMule.
    … ma tu non dovresti consultare direttamente la versione italiana del blog? :D

  4. gil said:

    Thanks for the warning!

  5. Anonymous said:

    מדריך: כיצד למנוע מ-eMule להתחבר לשרתים שעוקבים אחריכם

    ארגוני מוסיקה והסקטים מפעילים שרתים אשר כל תפקידם הוא לעקוב אחרי מה שהמשתמשים מורידים. כדי למנוע אתחברות לשרתים אלו תפעלו אחרי ההוראות במ…

  6. Walter said:

    Riccardo,
    mi sono trasferito in Florida sei anni fa . . . mi sono imbattuto nel tuo articolo tramite digg.com. Comunque sia ho notato che pure gli amici miei a Roma usano eMule, allora e’ proprio vero che su eMule si trova molto piu’ ‘materiale’ in italiano eh?

    Mi sa che gli daro’ un’occhiata uno di questi giorni.

    Un saluto, buona fortuna,

    -Walter

  7. mememe said:

    What about connecting to the kad net only? This would circumvent connections to malicious servers. Sure, the kad net could be monitored too, but the the server spies are out of biz.

  8. Draba Ughat Bor said:

    Skaer laghur drame van quiro be sur neghome emule darsi serveri prassa con suelo mar bewi van drame quozevia?

  9. Christopher Cain said:

    I cannot locate the IPFilter sets at http://www.emulesecurity.net. Have these been removed or am I blind? Is there a mirror anywhere?

    Thanks,

    Chris.

  10. Ant said:

    Step #2 fails for me. I get:

    2006-04-02 1:04:14: The URL
    dialspace.dial.pipex.com/town/pipexdsl/s/ashu56/bluetack/level2.txt returned: 403
    - Error (6)!

    2006-04-02 1:04:14: IPFilter: Failed to download the ipfilter from
    dialspace.dial.pipex.com/town/pipexdsl/s/ashu56/bluetack/level2.txt

    Any ideas?

  11. Moore said:

    Hi good info , but the level 2 list is pretty useless for emule users , lvl2 only lists corporations etc , lvl1 will block known riaa/mpaa/mediasentry/govt and emule spy server IPs etc etc .

    Try the level 1 list instead , it works fine I just tried it :

    http://www.bluetack.co.uk/config/level1.txt

    -> redirects to ->

    dialspace.dial.pipex.com/town/pipexdsl/s/ashu56/bluetack/level1.txt

    There’s also a zip file for download which is much smaller file:

    http://www.bluetack.co.uk/config/level1.zip

    Level1 list is updated every day for blocking anti-p2p companies and all other main p2p threats.

    This is also the list which Protowall/Blockpost/PG2 users will be using for P2P protection. Might as well get it from the source to avoid any possible tampering by other people. ;)

  12. Avi Dardik said:

    Hi Ricky,
    You have a great, GREAT, site here. I’ve seen more than a couple of really good posts.
    I wanted to subscribe to your RSS feed, but I’ve discovered you have a bug on your site: Both Entries (RSS) and Comments (RSS) produce the same comments feed!
    Registration to the regular site feed is impossible.
    Please fix this so I can enjoy any posts you make immediately! :-)

    Thanks,
    Keep up the good work!

  13. riccardo said:

    Hi Avi, and thank you!
    RSS feeds should be fixed, now… It was a bug since the 2.0.1 version of Wordpress, I applied the patch ;)

  14. Toni said:

    Mmmmm… Once I did all this… Well, everything is fine but I CAN’T see the number of… fonts? I don’t know how to say it in english but I mean this: search results can usually be ordered by Name, Size, Disponibility? (again, I don’t know the english word), FONTS?, Type, ID, Author and so on…

    Now I can’t order by FONTS anymore because all I get is a ? (question mark) and it’s a shame so I’m going to go back and leave eMule as it was before… What’s the point of stay safe (from who?) if I can’t use eMule as I’ve been doing and as it should be used…

    So I’m sorry to say this, but unless someone has a solution for this problem then I think this is a waste of time.

    Hey! I’m not talking about you or your work, you just have made a great work providing this info and so I must say THANK YOU for your site and your advices…

  15. Jorge Santos said:

    Olá amigos! (Hello guys!)

    Não consigo fazer o passo 3. Não está claro, eu acho (I cannot make the step 3. It´s not clean, I suppose)

    Eu tenho que colar isso: ( I must to paste this:)

    [b] EneTec eMule IPFilter part2 Hi-security [/b]

    É isso??? ( Is it???)

  16. Yuliana said:

    I didnt find the “EneTec eMule IPFilter” , there are some issues with the website. But I follow the other instructions… thanks a lot for the tip.

  17. ido stras said:

    ido

  18. conrad said:

    Thank you for the helpful information

  19. Anonymous said:

    hi guys i’m italian and emulesecurity’s user…tips are located in the support forum!!!! post there your troubles and questions!!!

  20. Inommargina said:

    The good resource should be brought in bookmarks

Leave a comment