Problem s blokovanim p2p pomoci Layer7

Ahoj,
pokousim se blokovat nezadouci traffic pomoci layer7. Vse jsem podle navodu opatchoval (jadro 2.4.31, iptables 1.3.3) skompiloval a naistaloval.
iptables mi modul layer7 najdou:


gate:/etc/shorewall# iptables -m layer7 --help

iptables v1.3.3

LAYER7 match v1.3.3 options:

--l7dir directory  : Look for patterns here instead of /etc/l7-protocols/

(--l7dir must be specified before --l7proto if used!)
--l7proto [!] name : Match the protocol defined in /etc/l7-protocols/name.pat

gate:/etc/shorewall#

Ale kdyz se pokusim vytvorit nejake pravidlo tak se stane toto:


gate:/etc/shorewall# iptables -t mangle -A PREROUTING -m layer7 --17proto bittorrent -j DROP

iptables v1.3.3: Unknown arg `--17proto'

Try `iptables -h' or 'iptables --help' for more information.
gate:/etc/shorewall#

Dik za kazdou radu.

Dotaz: Problem s blokovanim p2p pomoci Layer7

Odpovědi