maybe ill write some tutorial :DHello!! I would like to block all known p2p program ( Kazaa, eDonkey, ...). I would like to find patch of iptables (p-o-m) which blocks all this programs??
Thanks for your help
Tomek
protecting from P2P is difficult, all depends on you users skillz :)
couple things I do:
- dont block normal P2P ports. it wont solve much becouse the user or the program (kazaa automaticly) changes ports to avoid such block. besides if you dont block the port you can easily spot P2P connections in program like IPTRAF(which helps diagnosing)
- do QoS on your router forcing every packet from HTTP.. to have prioroty over nonstandart ports.
- to filter connections on normal ports(HTTPS) use layer-7 filters like squid (for http,ftp and https), for other programs (SMTP,POP3,NEWS...) user layer-7 filters
- this should help you squash around 95% of downloaders. the other 5% you r going to slay using IPTRAF+normal user punishing :D
One more thing which is the good. P2P programs like to use a lot of connections. Limit number of connections per user to lets say 20-30 (im guessing here :). this is the easyiest to do with a proper Iptables filter :)
p.s. sorry for my english
Krystian Antoni Szybis tez Polak :D
