install ipp2p pada ubuntu dapper 2.6.15-26-server
http://securepoint.com/lists/html/LARTC/2007-03/msg00075.html
http://securepoint.com/lists/html/LARTC/2007-03/msg00077.html
Chain FORWARD (policy DROP)
target prot opt source destination
DROP all -- anywhere anywhere ipp2p v0.8.2 --ipp2p
LOG all -- anywhere anywhere ipp2p v0.8.2 --ipp2p LOG level warning
ACCEPT all -- 192.168.100.0/24 anywhere state NEW,RELATED,ESTABLISHED
ACCEPT all -- anywhere 192.168.100.0/24 state RELATED,ESTABLISHED
This would be the correct explanation.
1) Download:
* iptables-dev (apt-get)
* kernel-headers-2.x.x (your kernel, "uname -r")
* src of your iptables (iptables -V and apt-get source)
* ipp2p-0.8.0.tar.gz (stable)
2) untar ipp2p and cd ipp2p
3) Edit Makefile, if it's necesary:
* IPTABLES_SRC = /usr/src/iptables
* In my case, the headers are detected automaticaly.
4) make (WITHOUT ERRORS!!! ;) )
5) cp libipt_ipp2p.so /lib/iptables
6) cp ipt_ipp2p.ko /lib/modules/`uname -r`/kernel/net/ipv4/netfilter
7) depmod -A
8) insmod ipt_ipp2p.ko (or modprobe)
9) lsmod | grep ipp2p
10) iptables -m ipp2p --help
http://securepoint.com/lists/html/LARTC/2007-03/msg00077.html
Luego te vas al directorio del ipp2p
En el Makefile del ipp2p editar los siguientes parametros
IPTABLES_BIN = /usr/sbin/iptables
IPTABLES_SRC = /tmp/iptables-1.3.1
Luego hacer un
# make
Se crean los siguientes archivos en el directorio del ipp2p:
libipt_ipp2p.so
libipt_ipp2p.o
ipt_ipp2p.o
El archivo libipt_ipp2p.so moverlo a /lib/iptables
Copiar los otros dos al /lib/modules/2.4.20-8/kernel/net/ipv4/netfilter
luego hacer un
# depmod -a
Listo para definir una regla que bloquee todo el trafico P2P de kazza, ares, etc
# iptables -A FORWARD -m ipp2p --ipp2p -j DROP
Chain FORWARD (policy DROP)
target prot opt source destination
DROP all -- anywhere anywhere ipp2p v0.8.2 --ipp2p
LOG all -- anywhere anywhere ipp2p v0.8.2 --ipp2p LOG level warning
ACCEPT all -- 192.168.100.0/24 anywhere state NEW,RELATED,ESTABLISHED
ACCEPT all -- anywhere 192.168.100.0/24 state RELATED,ESTABLISHED
Komentar
Posting Komentar