Senhores, pelo FAQ do site do L7:
------------------------------ Q: I want to use l7-filter only on traffic from a particular computer or subnet, but iptables -A FORWARD -p tcp -s 192.168.1.2 -m layer7 --l7proto http (or similar) doesn't work. A: That's because you aren't letting l7-filter see the whole connection, but only the parts of it that match the first rule. You need to also let it see packets with the *destination* 192.168.1.2, or the analogous thing for your situation. ------------------------------ Q: I want to ACCEPT several protocols, DROPing the rest, but when I try, it drops (almost) everything! A: Please don't use l7-filter to do this.<http://l7-filter.sourceforge.net/HOWTO-kernel#blocking> The explaination to this problem is similar to the previous answer. If you try do this, you will block all TCP handshakes and thus all TCP connections. In addition, you will block all UDP connections that can't be identified on the first packet. Logo, se entedi corretamente eu não posso: iptables -P INPUT DROP iptables -A INPUT -m --layer7 --l7proto http -j ACCEPT alguem sabe dizer se posso: iptables -A INPUT -m --layer7 --l7proto http -j ACCEPT iptables -A INPUT -j DROP Pelo que eu deduzi, acho que tb não... pois é a mesma coisa. Em 10/07/07, Tiago (aka gar0t0) <[EMAIL PROTECTED]> escreveu: > > > Estou seguindo agora este tutorial > Por hora esta correndo tudo bem!! > Slackware 11 com kernel default > > vamos ver oq da né ? > :D > > > Luiz Antonio wrote: > > Slackers, > > > > O artigo esta publicado no site... > > > > > http://www.slackwarebrasil.org/2007/06/26/tutorial-de-instalacao-do-layer7slackware11iptables-137 > > < > http://www.slackwarebrasil.org/2007/06/26/tutorial-de-instalacao-do-layer7slackware11iptables-137 > > > > > > abs [']sss > > > > > > -- > > Luiz Antonio Oliveira > > aka redhate > > www.slackwarebrasil.org <http://www.slackwarebrasil.org> > > > > > > > > --~--~---------~--~----~------------~-------~--~----~ GUS-BR - Grupo de Usuários de Slackware Brasil http://www.slackwarebrasil.org/ http://groups.google.com/group/slack-users-br -~----------~----~----~----~------~----~------~--~---
