From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?iso-8859-1?Q?Matias_Bj=F8rling?= Subject: Yet Another Kazaa Issue Date: Tue, 19 Nov 2002 21:55:22 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001001c2900d$fa96b2f0$0200000a@parseerror.dk> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01C29016.5C1649C0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_000D_01C29016.5C1649C0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hey Im trying like hell to get Kazaa to stop connect successfully... = Whatever i do, blocking port 1214 in ANY possible way, it still resist = and connect sucessfully, even with thoes firewall rules iptables -A FORWARD -m string --string "X-Kazaa-Username:" -j DROP iptables -A FORWARD -m string --string "X-Kazaa-Network:" -j DROP iptables -A FORWARD -m string --string "X-Kazaa-IP:" -j DROP iptables -A FORWARD -m string --string "X-Kazaa-SupernodeIP" -j DROP iptables -A FORWARD -m string --string "Kazaa" -j DROP Chain FORWARD (policy DROP) target prot opt source destination DROP all -- anywhere anywhere STRING match = X-Kazaa-Username: DROP all -- anywhere anywhere STRING match = X-Kazaa-Network: DROP all -- anywhere anywhere STRING match = X-Kazaa-IP: DROP all -- anywhere anywhere STRING match = X-Kazaa-SupernodeIP DROP all -- anywhere anywhere STRING match = Kazaa LOG all -- anywhere anywhere STRING match = User LOG level warning DROP all -- anywhere anywhere STRING match = User state_chk all -- anywhere anywhere It catch the "kazaa" thingie on the homepage... But.. anyhow it somehow = seem to connect to the supernode outside... Im getting nuts.. Why can't = i stop it?.. What am i doing wrong.. I tried to ages now.. and it dont = work :( Any help will be appreciated :D Thanks - SilverWolf ------=_NextPart_000_000D_01C29016.5C1649C0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hey

Im trying like hell to get Kazaa to = stop connect=20 successfully... Whatever i do, blocking port 1214 in ANY possible way, = it still=20 resist and connect sucessfully, even with thoes firewall = rules

iptables -A FORWARD -m string --string=20 "X-Kazaa-Username:" -j DROP
iptables -A FORWARD -m string --string=20 "X-Kazaa-Network:" -j DROP
iptables -A FORWARD -m string --string=20 "X-Kazaa-IP:" -j DROP
iptables -A FORWARD -m string --string=20 "X-Kazaa-SupernodeIP" -j DROP
iptables -A FORWARD -m string --string = "Kazaa"=20 -j DROP

Chain=20 FORWARD (policy DROP)
target     prot opt=20 source           &= nbsp;  =20 destination
DROP       all = -- =20 anywhere           = ; =20 anywhere           = STRING=20 match X-Kazaa-Username:
DROP       = all =20 -- =20 anywhere           = ; =20 anywhere           = STRING=20 match X-Kazaa-Network:
DROP       = all =20 -- =20 anywhere           = ; =20 anywhere           = STRING=20 match X-Kazaa-IP:
DROP       all = -- =20 anywhere           = ; =20 anywhere           = STRING=20 match X-Kazaa-SupernodeIP
DROP       = all =20 -- =20 anywhere           = ; =20 anywhere           = STRING=20 match Kazaa
LOG        all = -- =20 anywhere           = ; =20 anywhere           = STRING=20 match User LOG level = warning
DROP      =20 all -- =20 anywhere           = ; =20 anywhere           = STRING=20 match User
state_chk all -- =20 anywhere           = ; =20 anywhere

It catch the "kazaa" thingie on the = homepage...=20 But.. anyhow it somehow seem to connect to the supernode outside... Im = getting=20 nuts.. Why can't i stop it?.. What am i doing wrong.. I tried to ages = now.. and=20 it dont work :(

Any help will be appreciated = :D

Thanks

- SilverWolf

------=_NextPart_000_000D_01C29016.5C1649C0--