Rejected announces from libtorrent clients proxying through SOCKS

(catgirl.online)

26 points by apsec1123 days ago

6 comments

Frotag3 hours ago
Stuff like this is why I usually go for network namespaces + (wireguard / socks / iptables) when I need to isolate traffic.> The tracker in question that I wanted to get this working for explicitly forbids running development builds of approved BitTorrent clients.Also didn't realize trackers were that strict about clients. I've seen some ban buggy versions / sketchy clients (usually cloud-based or for mobile), but that's usually a for-your-own-good type thing. Major names like QBT are usually fine regardless of version.
- tonytamps2 hours ago
 The private torrent site crowd are very restrictive on which clients are allowed and even big names like qBit aren't safe enough to assume the version is allowed.
 - xdfgh11121 hour ago
 Although the identification is literally just a string you send when connecting, easy to spoof.
 - papyrus924451 minutes ago
 I've never looked at the source code of a PT, but my understanding is that they also implement heuristics to detect strange behaviors, i.e. clients trying to fake their ratio.
 - dns_snek1 hour ago
 That part is just for your own protection - these are almost always private trackers with ratio requirements.If you spoof the client name and your client ends up misbehaving/misreporting you'll just get banned for cheating.
dahrkael1 hour ago
i was expecting a more hands on explanation of what the client sends and what the tracker responds but this post is quite abstract for a technical issue. from what i read in the PR the qBT fix is to just ignore the proxy on the listening side of things but that doesnt explain the issue
eptcyka1 hour ago
The headline, whilst true to the author, makes no sense. Announces is a verb, announcements is a noun.
- debugnik1 hour ago
 A quick search shows me that "annouce" is sometimes used as a noun in the context of bittorrent for some reason.
 - papyrus924449 minutes ago
 Because it's a type of message, just like "GET" in the context of HTTP.
Mathnerd3143 hours ago
Sounds like a very restrictive tracker... but I guess the more restrictive, the more likely it has good stuff. Seems kind of strange though because most trackers I have seen just completely ban any sort of proxy or VPN.
- orliesaurus2 hours ago
 why ban VPN? what about seedboxes?
 - dns_snek1 hour ago
 They usually ban VPNs for website use but allow them for seedboxes (sometimes requiring approval). The rationale is to stop account sharing and ban evasion.
 - charcircuit2 hours ago
 >why ban VPN?It's harder to ban people if you allow using VPNs.
 - xdfgh11121 hour ago
 Private trackers have no open registration. If they ban you at the account level then it's pretty hard to get back in.
 - charcircuit1 hour ago
 >then it's pretty hard to get back in.It's really not. Even if they aren't recruiting new members you can buy an account or invites. You could also prepare alternate accounts ahead of time.
- seg_lol2 hours ago
 Is it because of some game theoretic information exposure? Or is this more about that you can't trust any of the VPN providers.
diftr1 hour ago
All that and he didn't even test it with the tracker in the end? What an anticlimax.
immibis48 minutes ago
Since you're already using a proxy, you can have the proxy change the parameters, and then you are not modifying the client.