From: <be...@us...> - 2003-12-14 16:05:56
|
Update of /cvsroot/iptables-p2p/iptables-p2p In directory sc8-pr-cvs1:/tmp/cvs-serv26171 Modified Files: AUTHORS FAQ NEWS Log Message: docs Index: AUTHORS =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/AUTHORS,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- AUTHORS 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ AUTHORS 14 Dec 2003 16:05:53 -0000 1.2 @@ -1,4 +1,10 @@ -Author: +Authors: - Filipe Almeida <fi...@rn...> http://mega.ist.utl.pt/~filipe/ + + - Josh Guilfoyle <ja...@us...> + http://sourceforge.net/users/jasta + + - Chris Zubrzycki <be...@us...> + http://sourceforge.net/users/beren12 Index: FAQ =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/FAQ,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- FAQ 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ FAQ 14 Dec 2003 16:05:53 -0000 1.2 @@ -3,11 +3,13 @@ 1. How do I install ipt_p2p? - - patch iptables with the patch in the iptables/ directory. + - copy the iptables headers to an appropiate place (/usr/include) or install + the iptables-dev package if your distro has one. - run make in order to compile ipt_p2p. - insert the kernel/ipt_p2p.o module directly using insmod or copy it into your modules directory. - + - insert the iptables library libipt_p2p.so into the iptables lib directory + (usually /lib/iptables) 2. How do I limit p2p traffic? @@ -16,24 +18,31 @@ See the example in the examples/ directory as a starting point. -3. And how do I block p2p access to and from my network? +3. And how do I block all p2p access to and from my network? Add a rule like the following one: iptables -A FORWARD -m p2p -j DROP -4. I am using a 2.6 kernel, how do I compile this? +4. And how do I block only certain protocols to and from my network? + + Add a rule like the following one: + iptables -A FORWARD -m p2p --p2p-protocol kazaa,bittorrent -j DROP + + It is also possible to use ! kazaa to match everything but kazaa. + +5. I am using a 2.6 kernel, how do I compile this? run: make linux-2.6 -5. Is it possible to subvert the filter using a p2p client with custom changes? +6. Is it possible to subvert the filter using a p2p client with custom changes? Possibly, altough it may not be that easy because matching is done in both directions (except for eDonkey). -6. What protocols are supported? +7. What protocols are supported? Currently the supported protocols are: - Kazaa @@ -43,6 +52,6 @@ - BitTorrent -7. Where can I find future updates to ipt_p2p? +8. Where can I find future updates to ipt_p2p? - Just visit http://mega.ist.utl.pt/~filipe/ipt_p2p/ + Just visit http://sourceforge.net/projects/iptables-p2p Index: NEWS =================================================================== RCS file: /cvsroot/iptables-p2p/iptables-p2p/NEWS,v retrieving revision 1.1.1.1 retrieving revision 1.2 diff -u -d -r1.1.1.1 -r1.2 --- NEWS 5 Dec 2003 00:20:33 -0000 1.1.1.1 +++ NEWS 14 Dec 2003 16:05:53 -0000 1.2 @@ -19,3 +19,9 @@ - 0.2.3 - eDonkey match updated for new version of eDonkey Hybrid - iptables-1.2.9 patch + +- 0.2.3.cvs + - moved project to sourceforge.net + - removed iptables patch, only needs headers installed + - added the ability to match multiple protocols at once + (--p2p-protocol kazaa,gnutella) |