Re: Problems with ipp2p

["Guillermo Javier Nardoni" <gjnardoni@xxxxxxxxxxxx>]

Hello there, may be you should you:

iptables -t nat -A PREROUTING -p tcp -i $DEV_IN -m ipp2p --ipp2p -j DROP
iptables -t nat -A POSTROUTING -p tcp -o $DEV_OUT -m ipp2p --ipp2p -j DROP

i had some issues trying ipp2p, but when i've just put -t nat or -t mangle
or even -t filter (default for iptables, i guess) it worked very nice


regards

guillermo from argentina

P.D: Sorry Andrea, i sweared i was sending an email to the mailing list instead of you.-

 

----- Original Message -----

From: Carlos Rosero

To: lartc@xxxxxxxxxxxxxxx

Sent: Thursday, October 06, 2005 6:40 PM

Subject: Problems with ipp2p

Hello every body:

 

I have RedHat fedora core 2 machine, using iptables and squid. I am having a lot of problems with peer2peer traffic. (bittorrent, kazaa, etc.) so I have installed ipp2p from rpm.

Every thing was ok until I use iptables rules.  I get this error.

 

[root@router iptables]# iptables -A INPUT -p tcp -m ipp2p --ipp2p -j DROP

iptables: No chain/target/match by that name

sames as:

iptables -A FORWARD -m ipp2p --ipp2p -j MARK --set-mark 0x01

 iptables -A FORWARD -m ipp2p --udp --kazaa --bit -j DROP

 iptables -A FORWARD -m ipp2p --tcp --edk --soul -j DROP

same error.

 

but if I use iptables -m ipp2p ?help I get the help page:

[root@router iptables]# iptables -m ipp2p --help

iptables v1.2.9

 

Usage: iptables -[AD] chain rule-specification [options]

       iptables -[RI] chain rulenum rule-specification [options]

       iptables -D chain rulenum [options]

?

IPP2P v0.7.1 options:

 --ipp2p        Grab all known p2p packets

 --ipp2p-data   Identify all known p2p download commands (obsolete)

 

 --edk          [TCP&UDP]       All known eDonkey/eMule/Overnet packets

 --dc           [TCP]           All known Direct Connect packets

?

So I don?t know what is wrong.

 

My system:

 

[root@router iptables]# cat /proc/version

Linux version 2.6.10-1.771_FC2smp (bhcompile@xxxxxxxxxxxxxxxxxxxxxx) (gcc version 3.3.3 20040412 (Red Hat Linux 3.3.3-7)) #1 SMP Mon Mar 28 01:10:51 EST 2005

 

Iptables version

iptables-1.2.9-2.3.1

 

Thanks.

 

Carlos

---

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc