IP Protection - Suggestions

[PaulZero]

I hope you guyz put an implementation of IP protection disabler... because some of us having trouble of false positives from IP infection.. though we can disable it, but that is necessary once the computer started. It can't be disable permanently.. I hope for that so we have a choice

[AdvancedSetup]

It's in the works to be implemented and should be out soon. Though now it's up to you to ensure that the IP is really safe as in most cases where users want us to unblock a site, it is often a bad site. Now that you're the one that can control it I'm sure many users are going to start adding many sites that are bad because an ad or something else from their main site triggered it and they won't know how or take the time to try to track down if it really was a bad IP or not.

[mountaintree16]

Ron,

Perhaps a silly question, but will a user be able to not install or somehow disable the IP exclusion feature? Or should it just not be used if one doesn't wish to use it?

[AdvancedSetup]

Nope it will be available to all. Just don't add an IP unless you know for sure it's a FP or post here in the FP forum and seek assistance checking on it before adding it.

[mountaintree16]

Thank you for the quick response, Ron.

Oh, don't worry, I definitely won't add one before checking.

[khaled.H]

hello everone

i have the problem with IP protection (its not aproblem really but i don't like it)

that is : when i select start protection and let the program start with windows and remove the mark from ''IP Protecation" After i did all that , when i restart the PC the mark back to "IP Protection" and i don't want the IP Protection work

so any one have to answer me how to stop ip protection from work ? (and still stop of work after the restart too)

thanks for all

[AdvancedSetup]

Please read this post and it should answer your question. You need to modify the registry to stop it from loading on reboot.

http://www.malwarebytes.org/forums/index.p...mp;#entry162100

[Swandog46]

Malwarebytes customers, we do listen to your feedback! As requested, starting with 1.42 we have implemented the ability to add individual IPs to the Ignore List so they are not blocked.

To do this, visit the blocked site and incur an IP block. Then right-click on the Malwarebytes system-tray icon after the block notification appears, and choose Add to Ignore List and the IP.

Please note that we do not recommend doing this as a general rule every time you see an IP block! -- we recommend instead, if you believe a particular IP is being blocked in error, that you report it to us as a false positive.

Thank you for your patience while we worked this issue out. We are constantly working to improve Malwarebytes' Anti-Malware and appreciate your suggestions!

[Rick Z]

Suggestions for IP blocking "Add to ignore list" feature

1. Allow tagging so the IP can be identified (later I will wonder what it is and may want to selectivly delete the item later, hard to do if I have no idea anymore why it was done)

2. Date/Timestamp, I would like to know when I entered the ignore and pehaps sort by date/time

3. Manual entry of IP's, the process of disabling IP blocking to open the page to select the IP to ignore is tedious

Of course I hope there won't be too many times I need to ignoe IP's as this function matures..

Keep up the good work,

Rick

[Croatian]

Dear Malwarebytes people,

The issue I have to deal with when it comes to this "IP Protection" feature is not that I want to manually block or unblock anything, I simply want it to not interfere with any video streams. What happens is that if I have this feature turned on ALL my video streams become unwatchable because the audio portion becomes very choppy, like all the sounds are shivering in cold. Otherwise, I have no complaints, but this one thing drives me nuts because I watch Croatian television over the Internet (I live in U.S.A.) in high quality and occasionally watch other prerecorded content from the same or other sources on daily basis. My computer is running Vista Ultimate edition and it is otherwise plenty fast and good for what I want to use it, but when I have this one feature turned on it becomes unwatchable. I apologize if this has been covered in the past elsewhere in the forum, but please understand my frustration with it because I deeply believe that this one feature is one of the unique and best features of the product, which if done right would really make a world of difference to all its users.

Thank you!

[Duchess]

Hi.

I would like to suggest that the log of blocked ip addresses shows more information to help make an informed guess on the block; e.g. the following detail are shown with the block in the log:

Reason for the block

Process Name making the reqest

Name of exe file making the request

Destination port

In the case of a dest port being http or https, the url requested

Thank you for a great program.

[RubbeR DuckY]

Process Name making the reqest

Name of exe file making the request

These are ideally the same thing? Or at least somewhat similar. Regardless, this is only supported on Vista and higher. We may make it an option in the near future.

[noknojon]

The issue I have to deal with when it comes to this "IP Protection" feature is not that I want to manually block or unblock anything, I simply want it to not interfere with any video streams. What happens is that if I have this feature turned on ALL my video streams become unwatchable because the audio portion becomes very choppy, like all the sounds are shivering in cold. Otherwise, I have no complaints, but this one thing drives me nuts because I watch Croatian television over the Internet (I live in U.S.A.) in high quality and occasionally watch other prerecorded content from the same or other sources on daily basis. My computer is running Vista Ultimate edition and it is otherwise plenty fast and good for what I want to use it, but when I have this one feature turned on it becomes unwatchable. I apologize if this has been covered in the past elsewhere in the forum, but please understand my frustration with it because I deeply believe that this one feature is one of the unique and best features of the product, which if done right would really make a world of difference to all its users.

Please fully read the link I have left below - It gives you good information on the IP blocking system -

http://www.malwarebytes.org/forums/index.p...st&p=162100

Thank you -

[godboss]

How about including in the log file what application was trying to access the website, or the application that generated the block.

This would be an excelent addition since it could allow us to determine a potential worm/trojan that isnt detected by AV or MWB scans.

[mynorgeek]

It's possible that this suggestion/request has already been made, and if so, I apologize. I did look back and kind of skim the thread and didn't see a similar suggestion.

As I posted here, I think it would be a very good idea (less annoying even) if MBAM Pro did not show the same bubble for the same IP blocking multiple times.

The log below shows 18 entries over a span of about 3 minutes. I don't know for sure how many bubbles actually popped up during that time frame, but I'm going to guess it was 6. Each one was closed by me clicking on the X.

12:22:02 user IP-BLOCK 208.94.233.132

12:22:05 user IP-BLOCK 208.94.233.132

12:22:11 user IP-BLOCK 208.94.233.132

12:22:23 user IP-BLOCK 208.94.233.132

12:22:26 user IP-BLOCK 208.94.233.132

12:22:31 user IP-BLOCK 208.94.233.132

12:22:32 user IP-BLOCK 208.94.233.132

12:22:34 user IP-BLOCK 208.94.233.132

12:22:40 user IP-BLOCK 208.94.233.132

12:22:52 user IP-BLOCK 208.94.233.132

12:22:55 user IP-BLOCK 208.94.233.132

12:23:01 user IP-BLOCK 208.94.233.132

12:24:40 user IP-BLOCK 208.94.233.132

12:24:43 user IP-BLOCK 208.94.233.132

12:24:49 user IP-BLOCK 208.94.233.132

12:25:01 user IP-BLOCK 208.94.233.132

12:25:04 user IP-BLOCK 208.94.233.132

12:25:10 user IP-BLOCK 208.94.233.132

Here is another partial log spanning 31 seconds with a half dozen entries. I know for sure that 2 bubbles popped up for this sequence.

21:50:15 user IP-BLOCK 208.94.233.132

21:50:18 user IP-BLOCK 208.94.233.132

21:50:24 user IP-BLOCK 208.94.233.132

21:50:36 user IP-BLOCK 208.94.233.132

21:50:40 user IP-BLOCK 208.94.233.132

21:50:46 user IP-BLOCK 208.94.233.132

It would be nice if the bubble stayed closed after being clicked, unless it is the intent of the programmers to show us users that the malicious IP address is making repeated access attempts.

I am not talking about disabling the IP blocking.

I'm not talking about false positives.

And I am not talking about hiding the bubbles, i.e implementing silent blocking.

I'd just like to see fewer bubbles when MBAM Pro does its thing.

Thanks for your consideration.

This program and this team of people working on this program are quite impressive and I'm glad to have the program onboard!

[Edgor]

When the IP blocked message pops up above the system tray, is there a way to set it so that it goes away after a few seconds on its own and I don't have to go hit the X to close it? I'm using Windows XP.

Count me as one who'd like the option to turn off this notification, but if it has to remain for whatever reason, it would be nice if it would notify me and then go away on its own without me having to interrupt what I'm doing to close the box.

[exile360]

It should go away automatically after a few seconds unless your PC is actively trying to connect to a malicious IP repeatedly. As for disabling the notification, there is a way to do so. Please have a look here under Registry Switches for Controlling IP-Blocking.

Thanks

[rio]

My understanding is that the IP pop-up messages can report either outgoing or incoming IP blocks. If so, then I would suggest changing the text so that it clarifies which IP block has happened, outgoing or incoming. This would help the user respond better to these messages.

[Esetisthebest]

Since I'm too lazy to create a new topic, I say it here.

I had an issue with the IP protection in version 1.44. When I should disable the IP protection from the icon, I had to right click and hit "disable IP Protection" multiple times. The issue is all gone now with the new version!

Thanks alot, Malwarebytes! You're the best!

[RsH]

I cannot turn on Website Blocking in version 1.45 and the log file shows error code 21 every time I try, but error code 21 is not covered in the help file so I have no idea what that means. How do I turn ON IP blocking in version 1.45?

[AdvancedSetup]

I cannot turn on Website Blocking in version 1.45 and the log file shows error code 21 every time I try, but error code 21 is not covered in the help file so I have no idea what that means. How do I turn ON IP blocking in version 1.45?

Please contact the Help Desk and they can assist you with this.

You can contact the help desk at support@malwarebytes.org

[striver]

After reading others' replys,Iam a little confused!

[delete2end]

can the malwarebytes team license Peer Guardian and just integrate as necessary into this fine program? if i remember correctly the source is open source...

[delete2end]

can the malwarebytes team license Peer Guardian and just integrate as necessary into this fine program? if i remember correctly the source is open source...

if i remember correctly the CODE is open source...

[FinnishSaint]

Are you aware that PeerGuardian 2 has like 10% of existing IPs blocked, including masses of good IPs(might be a rumour)?