Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ***** Inatall Packages *****
- apt-get install l7-filter-userspace l7-protocols
- # probe the netlink module by
- modprobe ip_conntrack_netlink
- ***** Iptables *****
- -A OUTPUT -j NFQUEUE --queue-num 0
- ---------
- -A FORWARD -m state --state RELATED,ESTABLISHED -j l7-filter
- -A FORWARD -i eth1 -j l7-filter
- -A l7-filter -j NFQUEUE --queue-num 0
- ---------
- -A FORWARD -p tcp -m state --state RELATED,ESTABLISHED -j l7-filter
- -A FORWARD -p udp -m state --state RELATED,ESTABLISHED -j l7-filter
- -A FORWARD -i eth1 -j l7-filter
- -A FORWARD -i eth0 -j l7-filter
- -A l7-filter -j NFQUEUE --queue-num 0
- *** creat /etc/l7_filter.conf ***
- /etc/l7_filter.conf
- bittorrent 3
- ****run l7-filter with queue number 0 *****
- l7-filter -vv -f /etc/l7_filter.conf
Advertisement
Add Comment
Please, Sign In to add comment