{"action":"created","issue":{"url":"https://api.github.com/repos/RetroShare/RetroShare/issues/71","labels_url":"https://api.github.com/repos/RetroShare/RetroShare/issues/71/labels{/name}","comments_url":"https://api.github.com/repos/RetroShare/RetroShare/issues/71/comments","events_url":"https://api.github.com/repos/RetroShare/RetroShare/issues/71/events","html_url":"https://github.com/RetroShare/RetroShare/issues/71","id":104347837,"number":71,"title":"IP blacklist doesn't work.","user":{"login":"bauermann","id":791149,"avatar_url":"https://avatars.githubusercontent.com/u/791149?v=3","gravatar_id":"","url":"https://api.github.com/users/bauermann","html_url":"https://github.com/bauermann","followers_url":"https://api.github.com/users/bauermann/followers","following_url":"https://api.github.com/users/bauermann/following{/other_user}","gists_url":"https://api.github.com/users/bauermann/gists{/gist_id}","starred_url":"https://api.github.com/users/bauermann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bauermann/subscriptions","organizations_url":"https://api.github.com/users/bauermann/orgs","repos_url":"https://api.github.com/users/bauermann/repos","events_url":"https://api.github.com/users/bauermann/events{/privacy}","received_events_url":"https://api.github.com/users/bauermann/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-09-01T20:25:08Z","updated_at":"2015-10-30T00:53:21Z","closed_at":null,"body":"I manually added 194.228.20.255/24 to the IP blacklist, but looking at network traffic with Wireshark I see my machine receiving UDP packets from that network (can't be avoided, I suppose), but to my surprise happily **SENDING BACK** UDP packets to them (yes, plural!).\r\n\r\nThis is **VERY** dangerous, since those machines are known to be run by malicious actors. What if they have a remote exploit against RetroShare or some of its libs? RetroShare shouldn't do any processing of packets coming from malicious machines. It should drop them at the earliest opportunity without even reading its contents.\r\n\r\nThis is extremely serious, and needs to be fixed urgently.\r\n\r\nThis is on Ubuntu Vivid, with package RetroShare06 version 0.6.0-1.20150816.9734f32a~vivid, obtained via the RetroShare PPA."},"comment":{"url":"https://api.github.com/repos/RetroShare/RetroShare/issues/comments/152369875","html_url":"https://github.com/RetroShare/RetroShare/issues/71#issuecomment-152369875","issue_url":"https://api.github.com/repos/RetroShare/RetroShare/issues/71","id":152369875,"user":{"login":"csoler","id":329008,"avatar_url":"https://avatars.githubusercontent.com/u/329008?v=3","gravatar_id":"","url":"https://api.github.com/users/csoler","html_url":"https://github.com/csoler","followers_url":"https://api.github.com/users/csoler/followers","following_url":"https://api.github.com/users/csoler/following{/other_user}","gists_url":"https://api.github.com/users/csoler/gists{/gist_id}","starred_url":"https://api.github.com/users/csoler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/csoler/subscriptions","organizations_url":"https://api.github.com/users/csoler/orgs","repos_url":"https://api.github.com/users/csoler/repos","events_url":"https://api.github.com/users/csoler/events{/privacy}","received_events_url":"https://api.github.com/users/csoler/received_events","type":"User","site_admin":false},"created_at":"2015-10-30T00:53:20Z","updated_at":"2015-10-30T00:53:20Z","body":"any news about this?"}}