iptables-p2p-users — Users list

Re: [Iptables-p2p-users] Torrent matching.

[Stian B. B. <st...@ba...>]

Sorry to be such a nag but now everything works!! :)=20

Disregard my previous mails!=20

-stian

tir, 16,.11.2004 kl. 13.51 +0100, skrev Stian B. Barmen:
> Very sorry, I found the answer to my question in the FAQ.
>=20
> But now I have made the module, loaded it with modprobe and altered my
> iptables chain. Added a full drop at det top of the FORWARD chain but
> still my clients can use torrents.=20
>=20
> Is there a netfilter module that I need? Mangle or anything?=20
>=20
> Here is my lsmod:
>=20
> fire iptables-p2p-0.3.0a # lsmod
> Module                  Size  Used by    Not tainted
> ipt_p2p                 2632   1
> ipt_limit                984  10  (autoclean)
> ipt_LOG                 3480   6  (autoclean)
> ipt_REJECT              3448 163  (autoclean)
> ipt_string              1788   0  (autoclean)
> ipt_state                536   6  (autoclean)
> iptable_filter          1708   1  (autoclean)
> ip_nat_irc              2288   0  (unused)
> ip_nat_ftp              3024   0  (unused)
> iptable_nat            17382   3  [ip_nat_irc ip_nat_ftp]
> ip_conntrack_irc        3152   1  [ip_nat_irc]
> ip_conntrack_ftp        4272   1  [ip_nat_ftp]
> ip_conntrack           22816   2  [ipt_state ip_nat_irc ip_nat_ftp
> iptable_nat ip_conntrack_irc ip_conntrack_ftp]
> ip_tables              13504  10  [ipt_p2p ipt_limit ipt_LOG ipt_REJECT
> ipt_string ipt_state iptable_filter iptable_nat]
> e100                   50792   2
>=20
>=20
> This is a snip of my FORWARD:
>=20
> fire iptables-p2p-0.3.0a # iptables-save |grep FORWARD
> :FORWARD DROP [25:1446]
> -A FORWARD -m p2p --p2p-protocol all -j DROP
> -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
> -A FORWARD -j DROP
>=20
> My NAT:
>=20
> -A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth1 -j SNAT --to-source
> 217.177.50.1
>=20
> Any ideas?=20
>=20
> -stian
>=20
>=20
> tir, 16,.11.2004 kl. 12.26 +0100, skrev Stian B. Barmen:
> > Does iptables-p2p match torrents?=20
> >=20
> > =20
> >=20
> > Best regards
> >=20
> > Stian B. Barmen
> >=20
> >=20

Re: [Iptables-p2p-users] Torrent matching.

[Stian B. B. <st...@ba...>]

Very sorry, I found the answer to my question in the FAQ.

But now I have made the module, loaded it with modprobe and altered my
iptables chain. Added a full drop at det top of the FORWARD chain but
still my clients can use torrents.=20

Is there a netfilter module that I need? Mangle or anything?=20

Here is my lsmod:

fire iptables-p2p-0.3.0a # lsmod
Module                  Size  Used by    Not tainted
ipt_p2p                 2632   1
ipt_limit                984  10  (autoclean)
ipt_LOG                 3480   6  (autoclean)
ipt_REJECT              3448 163  (autoclean)
ipt_string              1788   0  (autoclean)
ipt_state                536   6  (autoclean)
iptable_filter          1708   1  (autoclean)
ip_nat_irc              2288   0  (unused)
ip_nat_ftp              3024   0  (unused)
iptable_nat            17382   3  [ip_nat_irc ip_nat_ftp]
ip_conntrack_irc        3152   1  [ip_nat_irc]
ip_conntrack_ftp        4272   1  [ip_nat_ftp]
ip_conntrack           22816   2  [ipt_state ip_nat_irc ip_nat_ftp
iptable_nat ip_conntrack_irc ip_conntrack_ftp]
ip_tables              13504  10  [ipt_p2p ipt_limit ipt_LOG ipt_REJECT
ipt_string ipt_state iptable_filter iptable_nat]
e100                   50792   2


This is a snip of my FORWARD:

fire iptables-p2p-0.3.0a # iptables-save |grep FORWARD
:FORWARD DROP [25:1446]
-A FORWARD -m p2p --p2p-protocol all -j DROP
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j DROP

My NAT:

-A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth1 -j SNAT --to-source
217.177.50.1

Any ideas?=20

-stian


tir, 16,.11.2004 kl. 12.26 +0100, skrev Stian B. Barmen:
> Does iptables-p2p match torrents?=20
>=20
> =20
>=20
> Best regards
>=20
> Stian B. Barmen
>=20
>=20

[Iptables-p2p-users] Torrent matching.

[Stian B. B. <sti...@it...>]

Does iptables-p2p match torrents? 

 

Best regards

Stian B. Barmen

[Iptables-p2p-users] iptables-p2p 0.3.0 released

[Filipe A. <fi...@rn...>]

iptables-p2p 0.3.0 has been released.

Please read the provided INSTALL file for updated installation instructions.

Major changes are:
    - Project name changed from ipt_p2p to iptables-p2p
    - Moved project to sourceforge.net
    - Removed iptables patch, only needs headers installed
    - Added the ability to specify specific protocols to match
    - FastTrack match updated for new version of FastTrack
    - eDonkey match updated
    - Added support for OpenFT
    - Added support for Shareazza/Gnutella2 in the gnutella match
    - Fixes in kernel 2.6 support