You can subscribe to this list here.
2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(13) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2004 |
Jan
(8) |
Feb
(43) |
Mar
(18) |
Apr
(2) |
May
|
Jun
(3) |
Jul
|
Aug
|
Sep
(15) |
Oct
|
Nov
|
Dec
|
From: <be...@us...> - 2003-12-14 16:05:56
|
Update of /cvsroot/iptables-p2p/iptables-p2p In directory sc8-pr-cvs1:/tmp/cvs-serv26171 Modified Files: AUTHORS FAQ NEWS Log Message: docs Index: AUTHORS =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/AUTHORS,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- AUTHORS 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ AUTHORS 14 Dec 2003 16:05:53 -0000 1.2 @@ -1,4 +1,10 @@ -Author: +Authors: - Filipe Almeida <fi...@rn...> http://mega.ist.utl.pt/~filipe/ + + - Josh Guilfoyle <ja...@us...> + http://sourceforge.net/users/jasta + + - Chris Zubrzycki <be...@us...> + http://sourceforge.net/users/beren12 Index: FAQ =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/FAQ,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- FAQ 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ FAQ 14 Dec 2003 16:05:53 -0000 1.2 @@ -3,11 +3,13 @@ 1. How do I install ipt_p2p? - - patch iptables with the patch in the iptables/ directory. + - copy the iptables headers to an appropiate place (/usr/include) or install + the iptables-dev package if your distro has one. - run make in order to compile ipt_p2p. - insert the kernel/ipt_p2p.o module directly using insmod or copy it into your modules directory. - + - insert the iptables library libipt_p2p.so into the iptables lib directory + (usually /lib/iptables) 2. How do I limit p2p traffic? @@ -16,24 +18,31 @@ See the example in the examples/ directory as a starting point. -3. And how do I block p2p access to and from my network? +3. And how do I block all p2p access to and from my network? Add a rule like the following one: iptables -A FORWARD -m p2p -j DROP -4. I am using a 2.6 kernel, how do I compile this? +4. And how do I block only certain protocols to and from my network? + + Add a rule like the following one: + iptables -A FORWARD -m p2p --p2p-protocol kazaa,bittorrent -j DROP + + It is also possible to use ! kazaa to match everything but kazaa. + +5. I am using a 2.6 kernel, how do I compile this? run: make linux-2.6 -5. Is it possible to subvert the filter using a p2p client with custom changes? +6. Is it possible to subvert the filter using a p2p client with custom changes? Possibly, altough it may not be that easy because matching is done in both directions (except for eDonkey). -6. What protocols are supported? +7. What protocols are supported? Currently the supported protocols are: - Kazaa @@ -43,6 +52,6 @@ - BitTorrent -7. Where can I find future updates to ipt_p2p? +8. Where can I find future updates to ipt_p2p? - Just visit http://mega.ist.utl.pt/~filipe/ipt_p2p/ + Just visit http://sourceforge.net/projects/iptables-p2p Index: NEWS =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/NEWS,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- NEWS 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ NEWS 14 Dec 2003 16:05:53 -0000 1.2 @@ -19,3 +19,9 @@ - 0.2.3 - eDonkey match updated for new version of eDonkey Hybrid - iptables-1.2.9 patch + +- 0.2.3.cvs + - moved project to sourceforge.net + - removed iptables patch, only needs headers installed + - added the ability to match multiple protocols at once + (--p2p-protocol kazaa,gnutella) |
From: <be...@us...> - 2003-12-14 16:05:12
|
Update of /cvsroot/iptables-p2p/iptables-p2p/kernel In directory sc8-pr-cvs1:/tmp/cvs-serv26109 Modified Files: main.c Log Message: formatting Index: main.c =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/kernel/main.c,v retrieving revision 1.5 retrieving revision 1.6 diff -u -d -r1.5 -r1.6 --- main.c 14 Dec 2003 06:24:58 -0000 1.5 +++ main.c 14 Dec 2003 16:05:07 -0000 1.6 @@ -27,21 +27,17 @@ MODULE_DESCRIPTION("IP tables P2P match module"); MODULE_LICENSE("GPL"); -int -match_http(const unsigned char *data, - const unsigned char *end); +int match_http(const unsigned char *data, + const unsigned char *end); -int -match_edonkey(const unsigned char *data, - const unsigned char *end); +int match_edonkey(const unsigned char *data, + const unsigned char *end); -int -match_dc(const unsigned char *data, - const unsigned char *end); +int match_dc(const unsigned char *data, + const unsigned char *end); -int -match_bittorrent(const unsigned char *data, - const unsigned char *end); +int match_bittorrent(const unsigned char *data, + const unsigned char *end); static int match(const struct sk_buff *skb, @@ -49,10 +45,12 @@ const struct net_device *out, const void *matchinfo, int offset, + #if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0) const void *hdr, u_int16_t datalen, #endif /* Linux < 2.6.0 */ + int *hotdrop) { const struct ipt_p2p_info *pinfo = matchinfo; |