I have a script which uses L7 to block P2P traffic in my AC56U.
Now I see that new versions drop the L7 support.
Is there any new way to block P2P?
Thanks
Now I see that new versions drop the L7 support.
Is there any new way to block P2P?
Thanks
Code:
modprobe xt_layer7
/usr/sbin/iptables -I FORWARD -i wl0.1 -m ipp2p --ipp2p -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto 100bao -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto ares -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto applejuice -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto audiogalaxy -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto bittorrent -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto directconnect -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto edonkey -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto fasttrack -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto gnucleuslan -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto gnutella -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto live365 -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto mute -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto poco -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto shoutcast -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto soulseek -j DROP
/usr/sbin/iptables -I FORWARD -i wl0.1 -m layer7 --l7proto tesla -j DROP