Re: [Iptables-p2p-users] Torrent matching.

[Stian B. B. <st...@ba...>]

Very sorry, I found the answer to my question in the FAQ.

But now I have made the module, loaded it with modprobe and altered my
iptables chain. Added a full drop at det top of the FORWARD chain but
still my clients can use torrents.=20

Is there a netfilter module that I need? Mangle or anything?=20

Here is my lsmod:

fire iptables-p2p-0.3.0a # lsmod
Module                  Size  Used by    Not tainted
ipt_p2p                 2632   1
ipt_limit                984  10  (autoclean)
ipt_LOG                 3480   6  (autoclean)
ipt_REJECT              3448 163  (autoclean)
ipt_string              1788   0  (autoclean)
ipt_state                536   6  (autoclean)
iptable_filter          1708   1  (autoclean)
ip_nat_irc              2288   0  (unused)
ip_nat_ftp              3024   0  (unused)
iptable_nat            17382   3  [ip_nat_irc ip_nat_ftp]
ip_conntrack_irc        3152   1  [ip_nat_irc]
ip_conntrack_ftp        4272   1  [ip_nat_ftp]
ip_conntrack           22816   2  [ipt_state ip_nat_irc ip_nat_ftp
iptable_nat ip_conntrack_irc ip_conntrack_ftp]
ip_tables              13504  10  [ipt_p2p ipt_limit ipt_LOG ipt_REJECT
ipt_string ipt_state iptable_filter iptable_nat]
e100                   50792   2


This is a snip of my FORWARD:

fire iptables-p2p-0.3.0a # iptables-save |grep FORWARD
:FORWARD DROP [25:1446]
-A FORWARD -m p2p --p2p-protocol all -j DROP
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j DROP

My NAT:

-A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth1 -j SNAT --to-source
217.177.50.1

Any ideas?=20

-stian


tir, 16,.11.2004 kl. 12.26 +0100, skrev Stian B. Barmen:
> Does iptables-p2p match torrents?=20
>=20
> =20
>=20
> Best regards
>=20
> Stian B. Barmen
>=20
>=20