ipf , p2p ciach... :)

Thread View: pl.comp.os.freebsd

3 messages

[T] Back to Threads [V] Tree View [G] Group Articles

3 total messages Started by koncio Thu, 08 Apr 2004 06:50

#57588

Author: koncio
Date: Thu, 08 Apr 2004 06:50

54 lines
3104 bytes

Witam
W jaki sposob przez ipf uciac calemu nat'owi wszelkie polaczenia p2p (kazaa
itd.) ?
Na ten mometn wyskrobalem cos takiego, ale nie dziala..

cat /etc/ipf.rules

pass out quick on tun0 proto tcp from any to any port = 21 keep state
pass out quick on tun0 proto tcp from any to any port = 22 keep state
pass out quick on tun0 proto tcp from any to any port = 25 keep state
pass out quick on tun0 proto tcp from any to any port = 80 keep state
pass out quick on tun0 proto tcp from any to any port = 110 keep state
pass out quick on tun0 proto tcp from any to any port = 8080 keep state
pass out quick on tun0 proto tcp from any to any port = 23 keep state
#pass out quick on tun0 proto tcp from any to any port = 21 keep state
pass out quick on tun0 proto udp from any to any keep state
pass out quick on tun0 proto icmp from any to any keep state
block out quick on tun0 all


pass in quick on tun0 proto tcp from any to x.77.159.95 port = 21 flags S
keep state keep frags
pass in quick on tun0 proto tcp from any to x.77.159.95 port = 22 flags S
keep state keep frags
pass in quick on tun0 proto tcp from any to x.77.159.95 port = 25 flags S
keep state keep frags
pass in quick on tun0 proto tcp from any to x.77.159.95 port = 53 flags S
keep state keep frags
pass in quick on tun0 proto udp from any to x.77.159.95 port = 53 keep state
keep frags
pass in quick on tun0 proto tcp from any to x.77.159.95 port = 80 flags S
keep state keep frags
pass in quick on tun0 proto tcp from any to x.77.159.95 port = 110 flags S
keep state keep frags



block in quick on tun0 all

#wychodzace z interfejsu
pass out quick on rl0 proto tcp from any to any keep state
#p2p-block
pass out quick on rl0 proto udp from any to any keep state
pass out quick on rl0 proto icmp from any to any keep state
block out quick on rl0 all

#przychodzace do interfejsu
pass in quick on rl0 proto tcp from any to any keep state
pass in quick on rl0 proto udp from any to any keep state
pass in quick on rl0 proto icmp from any to any keep state
block in quick on rl0 all

pass in quick on lo0 all
pass out quick on lo0 all

Re: ipf , p2p ciach... :)

#57589

Author: Marcin Mankiewicz
Date: Thu, 08 Apr 2004 07:03

14 lines
1217 bytes

On Thu, 8 Apr 2004 08:50:49 +0200,
 koncio <koncio@plusnet.pl> wrote:
> Witam
> W jaki sposob przez ipf uciac calemu nat'owi wszelkie polaczenia p2p (kazaa
> itd.) ?
> Na ten mometn wyskrobalem cos takiego, ale nie dziala..
[...]
temat walkowany nie raz na ipf tego nie zrobisz bo np. Kazaa "dobierze" Ci
sie do portu 80 i bedzie dzialac. dobrym sposobem jest snort

ps. pcof niedlugo znika

-- 
http://maleon.eden.one.pl

Re: ipf , p2p ciach... :)

#57590

Author: Baroo
Date: Thu, 08 Apr 2004 12:34

16 lines
1403 bytes

Użytkownik "koncio" <koncio@plusnet.pl> napisał w wiadomości
news:c52su9$qmh$1@atlantis.news.tpi.pl...
> Witam
> W jaki sposob przez ipf uciac calemu nat'owi wszelkie polaczenia p2p
(kazaa
> itd.) ?
> Na ten mometn wyskrobalem cos takiego, ale nie dziala..

To spróbuj linku poniżej

--
i NET, www.inet.one.pl    -     QoS and security for Linux
p2p KILLER, p2p.inet.one.pl    -   rules for Snort to kill p2p programs
"Unix is very simple, but it takes a genius to understand the simplicity".
[Dennis Ritchie]

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads