Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-28 Thread Stuart Henderson
[ http://www.mouedine.net/relayd/ ] > Le 2013-11-27 13:21, Tristan Le Guern a \xc3\xa9crit\xc2\xa0: >> Are you aware that DNS use TCP connexion when replies are too large >> for UDP? It is a bad practice to block this. >> When rep

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-27 Thread Wesley MOUEDINE ASSABY
Thanks, i will correct that. Le 2013-11-27 13:21, Tristan Le Guern a écrit : Le 11/25/13 15:38, Wesley MOUEDINE ASSABY a écrit : Hi, A new how to about PF and relayd : http://www.mouedine.net/relayd Cheers, Wesley MOUEDINE ASSABY Are you aware that DNS use TCP connexion when replies are too

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Wesley MOUEDINE ASSABY
Hi, Tested with facebook.com/ It works. In this case, PF doesn't block any IP, relayd take all the work, it is a transparent proxy with https/http inspection. I also tested this : Download .torrent file is not allowed. From a usb key, i tried to open a .torrent with utorrent client (windows)

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Paolo Aglialoro
Hi, really nice tutorial :) What about blocking some sites like dropbox, gdrive, etc. which are the main channels through which files are nowadays leaking out of companies? For instance, in the case of dropbox a single url would not be enough, just look here: https://ipdb.at/org/Dropbox Same to

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Vijay Sankar
Quoting Wesley MOUEDINE ASSABY : Hi, A new how to about PF and relayd : http://www.mouedine.net/relayd Cheers, Wesley MOUEDINE ASSABY Nice! Thanks very much, Vijay Vijay Sankar, M.Eng., P.Eng. ForeTell Technologies Limited vsan...@foretell.ca ---

Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Wesley MOUEDINE ASSABY
Hi, A new how to about PF and relayd : http://www.mouedine.net/relayd Cheers, Wesley MOUEDINE ASSABY