Re: [Devil-Linux-discuss] P2p traffic filtering

[Mgr. M. J. <mai...@vc...>]

Hi.

Try to download testing version 1.2.14. Some time before I already 
announce this problem and Heiko solved it by making a new version where 
these libraries was presented. You can downloaded it from here:
ftp://ftp.devil-linux.org/pub/devel/testing/

(libipt_ipp2p.so and libipt_layer7.so are in directory /usr/lib/iptables)

BTW: Has anybody any experiences with layer7 in DL?
I made one simple firewall rule which should block rtsp protocol and 
this rule blocks nothing and content of the packets sends to the syslog ?
Does anybody know why ?

This is the rule:
$IPTABLES -t mangle -A POSTROUTING -m layer7 --l7proto rtsp -j DROP

Jiri Motycka


Fred Frigerio napsal(a):
> OK, I think I know what the problem is but I am not sure how to fix it.
> The iptables module ipp2p is there but it looks like the shared library
> that needs to go in the /var/lib/iptables is missing. I was able to
> modprobe for the ipt_ipp2p.o module ok but when I try iptables -m ipp2p
> --help I get an error about a missing library.
>
> Looking at the ipp2p homepage, it seems that needs to be copied to the
> /var/lib/iptables directory after compiling.
>
> http://www.ipp2p.org/docu_en.html
>
>
> Fred Frigerio
> Locust USA
>  
> This electronic message transmission contains information from Locust
> USA which may be confidential or privileged.  The information is
> intended to be for the use of the individual or entity named above.  If
> you are not the intended recipient, be aware that any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited.  If you have received this electronic transmission in error,
> please notify us by telephone (305-889-5410) or by reply via electronic
> mail immediately.
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf Of
> Fred Frigerio
> Sent: Wednesday, July 25, 2007 4:38 PM
> To: dev...@li...
> Subject: [Devil-Linux-discuss] P2p traffic filtering
>
> I am trying to filter p2p traffic at the firewall. Does DL contain any
> iptables module that does that? If not has anyone done it? Would you
> share your solution?
>
> I appreciate your help.
>
> Fred F.