Copyright Notice using Proxy + Blocklist?

dondraper2

I've always been super careful online, I had never received a copyright notice before and am looking for some feedback from the forum.

I received my first and hopefully last Copyright Infringement letter and with all the caution I've taken I was very shocked when I saw it. I've considered other bittorent clients as I've read that this has happened to a couple other Deluge users, but I am a huge Deluge fan. Not a fan of anything else really after trying them all so I'd just prefer this to work properly.

I use PIA for my proxy connection, Blocklist add-on enabled and use a iBlocklist's Anti-infringement list via https://www.iblocklist.com that I pay for annually.

Here are my current settings for Deluge 1.3.13:

Network Connections


Proxy Connections


Blocklist


The copyright infringement letter I received indicated the port number and it was not 1080, it was on one of the randomly generated ports:
- ------------- Infringement Details ----------------------------------
Title:        Anthony Bourdain: Parts Unknown
Timestamp:    2016-12-XXXX:XX:XXX
IP Address:   XX.XX.XXX.XXX
Port:         52XXX
Type:         BitTorrent
Torrent Hash: 15XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Filename:     Anthony.Bourdain.Parts.Unknown.S08E04.720p.HDTV.x264.mp4
Filesize:     506 MB
- ---------------------------------------------------------------------

Since the letter I downloaded a program I used to use, but no longer find very useful until now, PeerBlocker. I set it up and added the infringement list and was astonished when I started Deluge. With absolutely no torrents at all added I received tons and tons of flagged connections through the random incoming/outgoing ports:


Now I am not a true believer in block-lists so I am aware those IP's being blocked could be ANYTHING not posing a threat ...but I am concerned. I then changed the ports from random to specific ranges and asked my firewall to block all outgoing and incoming connections within those ranges ...and then any torrents/magnet links added would not connect and download at all. I also found the after shutting down and starting Deluge a few times it would randomize the port number even though that option was disabled.

I've since gone back to my researched setup which all the pics are from above. I am fairly concerned and would truly appreciate any feedback please and thank you!

dondraper2

Realized that if I change the default proxy address (proxy-nl.privateinternetaccess.com) to an IP address found via http://tejji.com/ip/url-to-ip-address.aspx?domain=proxy-nl.privateinternetaccess.com it all seems to run smooth. Unsure if certain IP's that connect are better than others though?

mike8198247

I wouldn't trust my torrent client to adhere to a proxy, as I've seen lots of reports of leaks in that situation.

For me, I run a headless linux server, always connected to the VPN, with transmission-daemon running inside it. I have a custom script that goes into transmission's settings and binds IPv4 to the detected tunnel address while disabling IPv6 with a loopback address. After over a year, I've had no problems. You could write and find simpler scripts as well.

The main point being: All torrenting is done within the VPN machine, and everyone just connects to the transmission GUI. Pretty solid so far.

Osborne_Cox

Try running Wireshark with Deluge running, see whether it is leaking. "Trust, but verify."

Khariz

Yeah...the solution to the problem is to torrent with the actual VPN service running, with the TAP adapter bound to the Torrent Client.  If all the traffic is going through the tunnel, you won't get these notices.

Grantz

Khariz said:

Yeah...the solution to the problem is to torrent with the actual VPN service running, with the TAP adapter bound to the Torrent Client.  If all the traffic is going through the tunnel, you won't get these notices.

My question is, if the VPN is on all the time and IPLeak/DNS Leak is enabled and the Kill Switch on is that good enough?  What is meant by bind the TAP Adapter to the Torrent Client?

Khariz

Yes, it should be good enough. But most modern torrent clients have the ability to say "only use this single network adapter" and you set it to the VPN's tap adapter. That's what binding the torrent client to the tap adapter means.