Hi all, I made a script using iptables with layer 7 filter support... My default policy is : $IPTABLES -P INPUT DROP $IPTABLES -P OUTPUT DROP $IPTABLES -P FORWARD DROP The rules in the filter table works fine, but the wierd thing is, how come all the application (ex. bittorrent) doesn't work?? I haven't written any rules for the application to DROP yet, and have tried to add $IPTABLES -A LAN-Internet -s $NET_LAN -d 0/0 -m layer7 --l7proto bittorrent And still, it wont work... Any help please??? Regards, Adhi __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
