|
|
Sponsored Content
Top Forums
UNIX for Advanced & Expert Users
Expert opinion on iptables/torrents
Post 302798979 by Corona688 on Thursday 25th of April 2013 01:35:45 PM
04-25-2013
l7 is a do-anything addon for iptables which connects iptables to usermode software. It's this software which must do the packet analysis.
It's possible but difficult; bittorent is (intentionally) hard to tell apart from ordinary traffic. In response to throttling and censorship, it has become even more so.
That is what I had to do eventually. (You don't need l7 to block ports. Plain iptables can do that easily.) It cannot block all torrents but many. It was a sad moment, a final admission of defeat, that I couldn't simply let my customers have what they wanted at all times. 
Yes, very difficult. It probably negotiates over https, which customers obviously need to work unimpeded; which once connected can carry whatever it wants without letting you see the contents. This is also how tor hides itself.
It's possible but difficult; bittorent is (intentionally) hard to tell apart from ordinary traffic. In response to throttling and censorship, it has become even more so.
Quote:
If I block via l7 all non-standard ports >1024 (ie. allow only 80, 53, 22 etc..)
Quote:
I read somewhere that l7 will not stop encrypted torrents... is that true?
|
|
9 More Discussions You Might Find Interesting
1. UNIX Desktop Questions & Answers
Hey all,
I'm brand new to Unix/Linux and have a couple of questions. I own a small education/consulting company that has a staff of approx. 50 employees. Most our work is geared towards the office-style environment (i.e. Word, Excel, Powerpoint, etc.). There are also some C and Java programmers... (4 Replies)
Discussion started by: dennie1
4 Replies
2. Solaris
Ladies/Gentlemen,
I am looking for a web-based tool to keep track of my Sun inventory. The following list of fields are fields I would like to store: Root Passwd (needs to be secure) / Hostid / Console Port / IP Address / Platform / Application / Hostname . . . you get the point.
Do any of... (4 Replies)
Discussion started by: pc9456
4 Replies
3. Post Here to Contact Site Administrators and Moderators
Hi,
I am new at this site and at unix. I was reading some answers that the administrators and moderators have posted to others, and sometimes I feel like their a little sarcastic.
I am asking just to be patient to me, I know nothing about unix but I do want to learn, and I think that positive... (7 Replies)
Discussion started by: HN19
7 Replies
4. UNIX for Dummies Questions & Answers
i'm trying to figure out a script that uses sed, and i'm not totally sure if it does what I think it does.
The script...
- takes in 3 inputs, $1, $2 are names. $3 is a file.
- filename is a file.
Here is what I'm trying to figure out:
cat $3 | grep "id17" > var2
sed "s|@@.*||g" var2 >... (1 Reply)
Discussion started by: gammaman
1 Replies
5. UNIX for Dummies Questions & Answers
Hello,
I get the following in one of my error logs:
Device /dev/sda, SATA disks accessed
via libata are not currently supported by smartmontools. When libata is
given an ATA
pass-thru ioctl() then an additional '-d libata' device type will be
added to smartmontools.
---------------
I... (0 Replies)
Discussion started by: mojoman
0 Replies
6. UNIX and Linux Applications
Hello,
I get the following in one of my error logs:
Device /dev/sda, SATA disks accessed
via libata are not currently supported by smartmontools. When libata is
given an ATA
pass-thru ioctl() then an additional '-d libata' device type will be
added to smartmontools.
---------------
... (1 Reply)
Discussion started by: mojoman
1 Replies
7. UNIX for Advanced & Expert Users
This perhaps does not belong in ths category; apologies, however, we have a heated debate going and your input will decide the result.
Should UNIX (HP, AIX, etc) be rebooted following a monthly cycle (Every month, or a qtr, etc.). We have some UX admins (grumps) who say they have seen a UX... (6 Replies)
Discussion started by: rsheikh
6 Replies
8. What is on Your Mind?
Dear Forum staff / Advisors / members ,
I am having something in my mind, about Linux / Unix possible Interview questions collections, I guess if I post them here,which might be useful for our members and for students, and in meantime we can discuss also about those questions, what's your... (4 Replies)
Discussion started by: Akshay Hegde
4 Replies
9. Android
Please disregard this post (0 Replies)
Discussion started by: johnnybopper
0 Replies
LEARN ABOUT DEBIAN
transmission-gtk
TRANSMISSION-GTK(1) BSD General Commands Manual TRANSMISSION-GTK(1) NAME
transmission-gtk -- a bittorrent client SYNOPSIS
transmission-gtk -? transmission-gtk [-pqm] [torrent-file ...] DESCRIPTION
transmission-gtk is a fast and easy BitTorrent client. BitTorrent is a peer-to-peer file transfer protocol which uses a metainfo file (usually with the .torrent file extension) and a central tracker to distribute file data amongst a group of peers. For more information on the BitTorrent protocol see http://www.bittorrent.org/ OPTIONS
-? --help Show help options -p --paused Start with all torrents paused -m --minimized Start minimized in notification area -g, --config-dir directory Where to look for configuration files. This can be used to swap between using the cli, daemon, gtk, and qt clients. See http://trac.transmissionbt.com/wiki/ConfigFiles for more information. Multiple .torrent files may be added at startup by appending them on the command line. If transmission-gtk is already running, the torrents will be added to the running instance. ENVIRONMENT
TRANSMISSION_HOME Sets the default config-dir. http_proxy libcurl uses this environment variable when performing tracker announces. If set, this overrides the GNOME proxy preferences. FILES
~/.config/transmission The config-dir used when neither [TRANSMISSION_HOME] nor [-g] is specified. AUTHORS
transmission-gtk was written by Jordan Lee, Josh Elsasser, Eric Petit, and Mitchell Livingston. SEE ALSO
transmission-create(1), transmission-daemon(1), transmission-edit(1), transmission-gtk(1), transmission-qt(1), transmission-remote(1), transmission-show(1) http://www.transmissionbt.com/ BSD
May 20, 2008 BSD