Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #161435

Re: L7 filter and iptables Problem

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Thanks i manage to do that with IPtable string  and ipp2p
although still in monitoring however i am seeing some good result.
hopefully that will work.
Thanks,
Yousuf

On Tue, Dec 1, 2015 at 10:58 PM, Roman <romeo.r@gmail.com> wrote:

> Hi,
>
> Even if it would be supported there is no much use of iptables l7 filters.
> They never worked as expected. Get yourself a small juniper srx  :)
>
> 2015-12-01 19:51 GMT+02:00 Peter Ludikovsky <peter@ludikovsky.name>:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hi,
>>
>> According to to project site [0] there hasn't been any real
>> development since 2013, which was a patch against the 2.6 kernel line.
>> That kernel line is out of support since mid-2015.
>>
>> I'm afraid the string matching module would be your best bet for now.
>>
>> Regards,
>> /peter
>>
>> [0] http://l7-filter.clearos.com/
>>
>> Am 01.12.2015 um 08:56 schrieb Muhammad Yousuf Khan:
>> > Hello,
>> >
>> > i am using  Debian jessie and I have been trying to work with L7
>> > filter to block p2p but its not working
>> >
>> > iptables -I FORWARD -m layer7 --l7proto bittorrent -j DROP iptables
>> > v1.4.21: Couldn't load match `layer7':No such file or directory
>> >
>> > Try `iptables -h' or 'iptables --help' for more information.
>> >
>> > can you guys Please help.  string match with ip tables is easy but
>> > i am looking to use L7 filter on jessie. all the how-tos are out
>> > dated. example kernel patch etc.
>> >
>> > Please help.
>> >
>> > Thanks, Yousuf
>> >
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2.0.22 (MingW32)
>>
>> iQIcBAEBAgAGBQJWXd4OAAoJEM+6Ng5pbtyZAd8P/3vM3gVfiaUcVVdxsNPkRIzb
>> NddWvxnWwYp4DNCHRj5sKAJ4X5DhdqClEysT8eLMBfG+IXLW44mF/M3NBeVsbMAk
>> 5ugH4hlyaIK2Pxh1yIHOCz1uP7yRnj8X6ASp5PxbzBTowmHLynjyka0OnEdg0pR4
>> hsNvw9RyxPKPuqBTXy37SXGbp8mBmuFbQucaX7G80e8n5reCL9CvLTHKLiQ3BGdc
>> KanmYQjZ7K1/FISuBpl653iiR/Kpb4bfY2x2Nl54Pxs2ueFMwskIqsfGyxU6nSPb
>> Hk9OpDpJlQ14PTxZ2Tw/tvPJIhFqvQshrVD57OvQhgXrda+7o/sz1DbL5djLSAPj
>> b05luaVW9U+88XgAkcNPNZfrohy3JY1EnXPY5n3M83yZZ7QPPlwxc66Nu2PBS/rM
>> B0erP4t0c2tqxpMoewSmlX3Q0qm83IRET9ozSMqoEWbFYho499MR+uyTCkw1YO05
>> JfHS/4o/t+z9PzHo1h2r0tqij52WcgeD4TSZ8W4MdZxMmwk6w+XOsJYDpY7eX2gt
>> a6IRr5/pgzv6PLWjpXSwj1XCtQUxoZkWS7GPF5qfbBh1/t3hjRe6Hv8MwQPP0oSw
>> LelvMIhii2NVvlPueuSWH46XencEQId66wTkAx02YxP84FMctw7jJl7oljb/JrQ7
>> EXo9Iaaohz1ZjLSH3+Ht
>> =rHnt
>> -----END PGP SIGNATURE-----
>>
>>
>
>
> --
> Best regards,
> Roman.
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

L7 filter and iptables Problem Muhammad Yousuf Khan <sirtcp@gmail.com> - 2015-12-01 09:00 +0100
  Re: L7 filter and iptables Problem Roman <romeo.r@gmail.com> - 2015-12-01 19:00 +0100
    Re: L7 filter and iptables Problem Muhammad Yousuf Khan <sirtcp@gmail.com> - 2015-12-01 19:50 +0100
  Re: L7 filter and iptables Problem Peter Ludikovsky <peter@ludikovsky.name> - 2015-12-01 19:00 +0100

csiph-web