Hello, I guess a few of you know about the iptables-p2p project at the http://sourceforge.net/projects/iptables-p2p site. This suite has an excellent filter of which I use today and its running very smoothly. The main reason why I use this is because I desperately need to block torrents. IPP2P does not do this at this time (it seems to me in the doc at least). Is it maybe some way we could merge these two very similar projects together and get all the filters working on one distribution? iptables-p2p has not had any development for a little while aswell, so maybe a little look in they''re code to find the torrent block part and incorporate it in IPP2P? Best regards Stian B. Barmen
Stian B. Barmen wrote:> The main reason why I use this is because I desperately need to block > torrents. IPP2P does not do this at this time (it seems to me in the doc > at least).Yes it does, using option --bit IPP2P v0.6.1 options: --ipp2p Grab all known p2p packets --ipp2p-data Grab all known p2p data packets --edk Grab all known eDonkey/eMule/Overnet packets --edk-data Grab all eDonkey/eMule/Overnet data packets --dc Grab all known Direct Connect packets --dc-data Grab all Direct Connect data packets --kazaa Grab all KaZaA packets --kazaa-data Grab all KaZaA data packets --gnu Grab all Gnutella packets --gnu-data Grab all Gnutella data packets --bit Grab all BitTorrent packets --apple Grab all AppleJuice packets (beta - just a few tests until now) --soul SoulSeek (beta - handle with care) --winmx WinMX (beta - handle with care) HTH -- Michael Neumann Michael.Neumann@ub.uni-dortmund.de _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> > The main reason why I use this is because I desperately need to block > > torrents. IPP2P does not do this at this time (it seems to me in the doc > > at least). > > Yes it does, using option --bit >Great! :) I will give it a go and report back to you how it works! Thanks for the swift reply. -stian
I try to use patch-o-matic-ng for installation. Kernel patching works nicely but the libipt_ipp2p.so shared object does not get built. I find the .c file in the patch-o-matic tree under ipp2p but I don''t know how to manually compile it. My lsmod includes the sucsessfully made ipt_ipp2p module and I also recompiled iptables for good measure. Help anyone? :) Best regards Stian B. Barmen
On Thursday 18 November 2004 03:19, Michael Neumann wrote: <snip>> Yes it does, using option --bit > > IPP2P v0.6.1 options: > --ipp2p Grab all known p2p packets > --ipp2p-data Grab all known p2p data packets > --edk Grab all known eDonkey/eMule/Overnet packets > --edk-data Grab all eDonkey/eMule/Overnet data packetsDoes anyone know if it handles the new Kademilia eMule protocol? -- Jason Boxman Perl Programmer / *NIX Systems Administrator Shimberg Center for Affordable Housing | University of Florida http://edseek.com/ - Linux and FOSS stuff _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Jason Boxman wrote:> Does anyone know if it handles the new Kademilia eMule protocol?Yes and no. As Kademlia is kind of extension to eDonkey it is included in --edk. But most Kademlia patterns are not unique enough to identify packets definitely. I''ll look into this as soon as possible. Regards, Eicke -- IPP2P - P2P traffic detection for iptables/netfilter More information at http://www.ipp2p.org _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/