similar to: Matching with Layer7 vs. IPP2P

Hello, can anybody interpret what the following means: [root@funke ipp2p-0.8.0]# iptables -t mangle -A MarkList0x666-ipp2p -p tcp -m ipp2p --edk -j MarkSet0x666 iptables: Unknown error 4294967295 ----- I have installed ipp2p-0.8.0 via: make copied ipt_ipp2p.ko to my kernel lib dir copied libipt_ipp2p.so to my iptables lib dir insmod ipt_ipp2p gives the following in dmesg: IPP2P v0.8.0

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Hi All , My first message and I have a little problem with my FC6 box trying to block emule traffic using layer7 . Here my network : Internet --------- ADSL Router ------------------- FC6 Box -------------------- Emule Box external ADSL : Dynamic Internal ADSL : 192.168.254.1 external FC6 : 192.168.254.3 internal FC6 : 192.168.253.1 Emule Box : 192.168.253.3 I guess that everything

Hi, is anybody running asterisk on a xen domU and can give an opinion on the following: I have delegated a FritzCard and a HFC card to my domU and installed an asterisk setup that was running on the same isdn hardware but on a dedicated machine flawlessly. I experienced what I believed to be timing problems: sometimes calls on the Fritzcard did not seem to "reach" asterisk, when

re I would like to do some firewalling and p2p shaping/limiting on one of the vlans in my network and I was thinking of using linux box as transparent bridged firewall/limiter. For this I''m planning to use AMD64 2.2Ghz box with 2 1gbit NIC (Broadcom 5721), that will be bridged. The box must be totally transparent and unseen in the network, as well as it should have much influence on

Hi all, I have found problems in p2p traffic detection. The ipp2p module works fine but in shorewall the rules written for this protocols never match because the initials p2p connection (login) match in ''-m state --state RELATED,ESTABLISHED -j ACCEPT'' rule before ''-m ipp2p --ipp2p -j DROP'' rule, so netfilter never filter p2p traffic. I have had to run

I had been using L7-Filter[1] successfully for edonkey/eMule traffic until recently. I upgraded to the latest release of mldonkey, 2.5.28a, which implements eMule compatibility, and with support for Kademlia[2] enabled, network latency increases greatly. [1] http://l7-filter.sourceforge.net/ [2] http://www.infoanarchy.org/wiki/wiki.pl?Kademlia Has anyone created a new pattern match for

Hi, it seems that there is a bug in asterisk's dtmf mode autodetection. Assume following sip.conf: [sipprovider] disallow=all allow=g726 dtmfmode=auto DTMF does not work. It seems rfc2833 mode is chosen despite it being obvious that this cannot work! The following configuration is necessary to get DTMF to work: dtmfmode=info In my opinion, this behaviour is counter-intuitive. I am using

Hello I am looking for a way to have snort to dynamically update my shorewall config. I have seen software out there but I would like to see if anyone had tried this first. Aslo I would like to know if there is a way clear the Netfilter tables when I do a shorewall restart. The reason being is that when I make a change to my firewall setting I want all connections to have to re-establish

Hi, I defined several xen domains with libvirt. Can anybody tell me where libvirt stores these definitions? E.g. what files would one need to back up? Is it correct, that the xen domain definitions in /var/lib/xend/domains are overwritten regularly by libvirt? Many thanks, Arik

Hello I''ve setuped a QOS bridge under debian 3.1 using 2.6.18.3 kernel + iptables 1.3.6 I''ve patched the kernel an Iptables with esfq+layer7 without problems. This simple script doesn''t log nothing ... And I''m sure to have eMule traffic (I''ve checked with tcpdump ) If I remove " -m layer7 --l7proto edonkey \" line I can see

Hi, I have a Fedora 7 xen system with a domU to which I have delegated via pciback two isdn pci cards. One is a HFC-S card, the other a AVM Fritz!Card Pci 2.0. In the domU I load mISDN drivers for the cards. The two cards are recognized and function well UNTIL I either decide to unload one or both of the card driver modules (hfcpci and avmfritz) or I decide to shut down the domU. At this

Hi all. I remember someone in here was at least affiliated with the above mentioned ipp2p-project (an extension to iptables that allows to match peer-to-peer traffic). About two weeks ago I tried to contact the author of this extension via the address that is mentioned on the project website, since I wanted to send in a patch, but with no success. At least I didn''t receive a reply.

HI I have a bridge running ipp2p blocking Ares traffic and others protocols. This bridge works fine buts since two weeks can''t block Ares traffic. All protocols block fine but Ares not (upload and download). Somebody are using ipp2p blocking the latest Ares version ? My system settings are: kernel : 2.6.13 iptables: 1.3.3 ipp2p: 0.81 rc1 iptables -L -v output: Chain FORWARD

Subject almost says it all, I wonder if there is a way for me to use iptables matches like l7 and/or ipp2p match in a bridge ( one ethernet in and one ethernet out ) ? Regards.

Hi, I have switched a while back from chan_capi to chan_misdn. When the number is dialed and the phone is then picked up everything works just fine. Some users however FIRST pick up the phone and then start to dial... I did not get this to work with misdn. When two digits have been dialed, asterisk sees the extension as complete and does not wait for further digits. I am using an midsn NT

Hi, I am having problems creating VMs in virt-manager. I have played with different xen hypervisor versions 3.0 & 3.4 (with rpm -i --force) but have in principle gone back to the originals. - Though I cannot absolutely exclude that something has gone wrong. In principle I am using rhel 5.4 with the gitco xen 3.4 hypervisor. Can anybody put me on the right track with the attached error

Hi, I am having problems establishing an adsl connection in dom0 (but ONLY in dom0, without xen everything is ok). Following is my setup/situation: 1. Installed clean Fedora 7 (with virtualization option selected) 2. Booted with the non-xen kernel & setup adsl. Adsl connection works without any problems. 3. Rebooted with xen kernel into dom0. 4. adsl connection can no longer be activated

Hello there! I am trying to get traffic shaping working on my Linux router (debian woody 3r02) and for some things I wanted to use the layer 7 packet classifier, but I can''t get it to work. Here is what I did: -downloaded the patches from http://l7-filter.sourceforge.net -downloaded the kernel 2.6.7 source -downloaded the iptables 1.2.11 source -patched kernel (layer7 patch and some

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/