From: Stian B. B. <st...@ba...> - 2004-11-16 13:03:22
|
Sorry to be such a nag but now everything works!! :)=20 Disregard my previous mails!=20 -stian tir, 16,.11.2004 kl. 13.51 +0100, skrev Stian B. Barmen: > Very sorry, I found the answer to my question in the FAQ. >=20 > But now I have made the module, loaded it with modprobe and altered my > iptables chain. Added a full drop at det top of the FORWARD chain but > still my clients can use torrents.=20 >=20 > Is there a netfilter module that I need? Mangle or anything?=20 >=20 > Here is my lsmod: >=20 > fire iptables-p2p-0.3.0a # lsmod > Module Size Used by Not tainted > ipt_p2p 2632 1 > ipt_limit 984 10 (autoclean) > ipt_LOG 3480 6 (autoclean) > ipt_REJECT 3448 163 (autoclean) > ipt_string 1788 0 (autoclean) > ipt_state 536 6 (autoclean) > iptable_filter 1708 1 (autoclean) > ip_nat_irc 2288 0 (unused) > ip_nat_ftp 3024 0 (unused) > iptable_nat 17382 3 [ip_nat_irc ip_nat_ftp] > ip_conntrack_irc 3152 1 [ip_nat_irc] > ip_conntrack_ftp 4272 1 [ip_nat_ftp] > ip_conntrack 22816 2 [ipt_state ip_nat_irc ip_nat_ftp > iptable_nat ip_conntrack_irc ip_conntrack_ftp] > ip_tables 13504 10 [ipt_p2p ipt_limit ipt_LOG ipt_REJECT > ipt_string ipt_state iptable_filter iptable_nat] > e100 50792 2 >=20 >=20 > This is a snip of my FORWARD: >=20 > fire iptables-p2p-0.3.0a # iptables-save |grep FORWARD > :FORWARD DROP [25:1446] > -A FORWARD -m p2p --p2p-protocol all -j DROP > -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT > -A FORWARD -j DROP >=20 > My NAT: >=20 > -A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth1 -j SNAT --to-source > 217.177.50.1 >=20 > Any ideas?=20 >=20 > -stian >=20 >=20 > tir, 16,.11.2004 kl. 12.26 +0100, skrev Stian B. Barmen: > > Does iptables-p2p match torrents?=20 > >=20 > > =20 > >=20 > > Best regards > >=20 > > Stian B. Barmen > >=20 > >=20 |