Thanks i manage to do that with IPtable string and ipp2p although still in monitoring however i am seeing some good result. hopefully that will work. Thanks, Yousuf
On Tue, Dec 1, 2015 at 10:58 PM, Roman <rome...@gmail.com> wrote: > Hi, > > Even if it would be supported there is no much use of iptables l7 filters. > They never worked as expected. Get yourself a small juniper srx :) > > 2015-12-01 19:51 GMT+02:00 Peter Ludikovsky <pe...@ludikovsky.name>: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi, >> >> According to to project site [0] there hasn't been any real >> development since 2013, which was a patch against the 2.6 kernel line. >> That kernel line is out of support since mid-2015. >> >> I'm afraid the string matching module would be your best bet for now. >> >> Regards, >> /peter >> >> [0] http://l7-filter.clearos.com/ >> >> Am 01.12.2015 um 08:56 schrieb Muhammad Yousuf Khan: >> > Hello, >> > >> > i am using Debian jessie and I have been trying to work with L7 >> > filter to block p2p but its not working >> > >> > iptables -I FORWARD -m layer7 --l7proto bittorrent -j DROP iptables >> > v1.4.21: Couldn't load match `layer7':No such file or directory >> > >> > Try `iptables -h' or 'iptables --help' for more information. >> > >> > can you guys Please help. string match with ip tables is easy but >> > i am looking to use L7 filter on jessie. all the how-tos are out >> > dated. example kernel patch etc. >> > >> > Please help. >> > >> > Thanks, Yousuf >> > >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v2.0.22 (MingW32) >> >> iQIcBAEBAgAGBQJWXd4OAAoJEM+6Ng5pbtyZAd8P/3vM3gVfiaUcVVdxsNPkRIzb >> NddWvxnWwYp4DNCHRj5sKAJ4X5DhdqClEysT8eLMBfG+IXLW44mF/M3NBeVsbMAk >> 5ugH4hlyaIK2Pxh1yIHOCz1uP7yRnj8X6ASp5PxbzBTowmHLynjyka0OnEdg0pR4 >> hsNvw9RyxPKPuqBTXy37SXGbp8mBmuFbQucaX7G80e8n5reCL9CvLTHKLiQ3BGdc >> KanmYQjZ7K1/FISuBpl653iiR/Kpb4bfY2x2Nl54Pxs2ueFMwskIqsfGyxU6nSPb >> Hk9OpDpJlQ14PTxZ2Tw/tvPJIhFqvQshrVD57OvQhgXrda+7o/sz1DbL5djLSAPj >> b05luaVW9U+88XgAkcNPNZfrohy3JY1EnXPY5n3M83yZZ7QPPlwxc66Nu2PBS/rM >> B0erP4t0c2tqxpMoewSmlX3Q0qm83IRET9ozSMqoEWbFYho499MR+uyTCkw1YO05 >> JfHS/4o/t+z9PzHo1h2r0tqij52WcgeD4TSZ8W4MdZxMmwk6w+XOsJYDpY7eX2gt >> a6IRr5/pgzv6PLWjpXSwj1XCtQUxoZkWS7GPF5qfbBh1/t3hjRe6Hv8MwQPP0oSw >> LelvMIhii2NVvlPueuSWH46XencEQId66wTkAx02YxP84FMctw7jJl7oljb/JrQ7 >> EXo9Iaaohz1ZjLSH3+Ht >> =rHnt >> -----END PGP SIGNATURE----- >> >> > > > -- > Best regards, > Roman. >
