From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Leandro Andrade Travaglia" Date: Sat, 13 Mar 2004 02:01:22 +0000 Subject: Re: [LARTC] IPP2P v0.5 not working (but now is) and more... Message-Id: <001901c4089f$1842cdb0$4505a8c0@leandro> MIME-Version: 1 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0016_01C40885.F0107720" List-Id: To: lartc@vger.kernel.org This is a multi-part message in MIME format. ------=_NextPart_000_0016_01C40885.F0107720 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Thanks a lot... Well, let's try again I'll put here step-by-step what i'm doing. I'm logged on as ROOT, ok? Let's go... service iptables stop cd /home/files/ipp2p/0.5b iptables -V iptables 1.2.7a vim Makefile i edited the file to: IKERNEL =3D = -I/usr/src/linux-2.4.20-8/include IUSER =3D = -I/home/iptables-1.2.7a/include (i have downloaded iptables 1.2.7a = sources) NETFILTER_VERSION =3D \"1.2.7a\" make no erros rm /lib/iptables/libipt_ipp2p.so remove regular file? YES cp libipt_ipp2p.so /lib/iptables/ iptables -m ipp2p --help returns the help of the mod rmmod ipt_ipp2p pwd /home/files/ipp2p/0.5b insmod ipt_p2p service iptables start iptables -L FORWARD RH-Lokkit-0-50-INPUT all --anywhere anywhere iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP iptables -L FORWARD DROP tcp -- anywhere anywhere ipp2p v0.5b --kazaa RH-Lokkit-0-50-INPUT.................. But now KAZAA can't connect - It's working fine... Maybe i did something wrong, or the general rule --ipp2p isn't working = for me.... but i believe that i did something wrong - sorry... anyway, = thanks a lot.... Looking forward for IMESH and SOULSEEK support.... Now i have a few questions.... 1 - it is stable for me to use the --bit and --apple? Can it crash my = box? 2 - When i try to use ipp2p.gz, the shellscript to automatically start = an IPP2P setup using two network interfaces, it return the following: Starting IPP2P ... iptables v1.2.7a: Unknown arg `--restore-mark' Try `iptables -h' or 'iptables --help' for more information. iptables v1.2.7a: Unknown arg `--save-mark' Try `iptables -h' or 'iptables --help' for more information. iptables v1.2.7a: Unknown arg `--set-class' Try `iptables -h' or 'iptables --help' for more information. iptables v1.2.7a: Unknown arg `--set-class' Try `iptables -h' or 'iptables --help' for more information. done What is my problem? 3 - Does this shellscript really control the bandwith consuption by the = p2p programs? Why, for exemple, the wondershaper have much more "rules" and details? =20 ----- Original Message -----=20 From: miller69@gmx.net=20 To: lartc@mailman.ds9a.nl=20 Sent: Friday, March 12, 2004 8:25 AM Subject: Re: [LARTC] IPP2P v0.5 not working and more... Hi, I got the time to use an equal setup like yours to test the drop rule. > NOTHING HAPPENS - Kazaa can download files again.... Well, i grabbed KaZaA lite (K++) today, installed it on my system = (wich is connected to the internet trough a NATing router). IPP2P 0.5b was = working perfectly fine, I used the following rule to test: iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa -j DROP I could not download any more and iptables output looked like this: Chain FORWARD (policy ACCEPT 31525 packets, 1506K bytes) pkts bytes target prot opt in out source =20 destination 11 4780 DROP tcp -- * * 0.0.0.0/0 =20 0.0.0.0/0 ipp2p v0.5b --kazaa Removing the DROP rule let me download files again. So make sure that you're insmodding the right ipt_ipp2p.o and that your DROP-rule is in = the appropriate place. I'll look at IMESH and Soulseek tomorrow. Regards --=20 +++ NEU bei GMX und erstmalig in Deutschland: T=DCV-gepr=FCfter = Virenschutz +++ 100% Virenerkennung nach Wildlist. Infos: = http://www.gmx.net/virenschutz _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.620 / Virus Database: 399 - Release Date: 11/3/2004 ------=_NextPart_000_0016_01C40885.F0107720 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Thanks a lot...
Well, let's try again
I'll put here step-by-step what i'm=20 doing.
I'm logged on as ROOT, ok? Let's=20 go...
 
service iptables stop
cd /home/files/ipp2p/0.5b
iptables -V
    iptables = 1.2.7a
vim Makefile
    i edited the file=20 to:    IKERNEL =3D=20 -I/usr/src/linux-2.4.20-8/include
           &nb= sp;           &nbs= p;             IUSER = =3D=20 -I/home/iptables-1.2.7a/include (i have downloaded iptables 1.2.7a=20 sources)
       =20             =    =20             = NETFILTER_VERSION =3D=20 \"1.2.7a\"
make
    no = erros
rm = /lib/iptables/libipt_ipp2p.so
    remove regular file? = YES
cp libipt_ipp2p.so = /lib/iptables/
iptables -m ipp2p --help
    returns the help of = the=20 mod
rmmod ipt_ipp2p
pwd
   =20 /home/files/ipp2p/0.5b
insmod ipt_p2p
service iptables start
iptables -L FORWARD
    RH-Lokkit-0-50-INPUT = all =20 --anywhere    anywhere
iptables -t filter -I FORWARD 1 -p tcp = -m ipp2p=20 --kazaa -j DROP
iptables -L FORWARD
    = DROP   =20 tcp   --    anywhere   =20 anywhere    ipp2p v0.5b --kazaa
   =20 RH-Lokkit-0-50-INPUT..................
 
But now KAZAA can't connect - It's = working=20 fine...
Maybe i did something wrong, or the = general rule=20 --ipp2p isn't working for me.... but i believe that i did something = wrong -=20 sorry... anyway, thanks a lot.... Looking forward for IMESH and SOULSEEK = support....
 
Now i have a=20 few questions....
 
1 - it is stable for me to use the = --bit and=20 --apple? Can it crash my box?
2 - When i try to use ipp2p.gz,=20 the shellscript to automatically start an IPP2P setup using two = network=20 interfaces, it return the following:
 
Starting IPP2P  ... iptables = v1.2.7a:=20 Unknown arg `--restore-mark'
Try `iptables -h' or 'iptables --help' = for more=20 information.
iptables v1.2.7a: Unknown arg `--save-mark'
Try = `iptables -h'=20 or 'iptables --help' for more information.
iptables v1.2.7a: Unknown = arg=20 `--set-class'
Try `iptables -h' or 'iptables --help' for more=20 information.
iptables v1.2.7a: Unknown arg `--set-class'
Try = `iptables -h'=20 or 'iptables --help' for more information.
done
 
What is my problem?
 
3 - Does this shellscript really = control the=20 bandwith consuption by the p2p programs?
Why, for exemple, the wondershaper have = much more=20 "rules" and details?

 
 
   
 
----- Original Message -----
From:=20 miller69@gmx.net=20
To: lartc@mailman.ds9a.nl
Sent: Friday, March 12, 2004 = 8:25=20 AM
Subject: Re: [LARTC] IPP2P v0.5 = not=20 working and more...

Hi,

I got the time to use an equal setup like yours to = test the=20 drop rule.
> NOTHING HAPPENS - Kazaa can download files=20 again....

Well, i grabbed KaZaA lite (K++) today, installed it = on my=20 system (wich is
connected to the internet trough a NATing router). = IPP2P=20 0.5b was working
perfectly fine, I used the following rule to=20 test:

iptables -t filter -I FORWARD 1 -p tcp -m ipp2p --kazaa = -j=20 DROP

I could not download any more and iptables output looked = like=20 this:

Chain FORWARD (policy ACCEPT 31525 packets, 1506K=20 bytes)
 pkts bytes target     prot opt=20 in     out    =20 = source           &= nbsp; =20
destination
   11  4780=20 DROP       tcp  -- =20 *      *      =20 0.0.0.0/0          =20
0.0.0.0/0          = ipp2p=20 v0.5b --kazaa

Removing the DROP rule let me download files = again. =20 So make sure that
you're insmodding the right ipt_ipp2p.o and that = your=20 DROP-rule is in the
appropriate place. I'll look at IMESH and = Soulseek=20 tomorrow.

Regards

--
+++ NEU bei GMX und erstmalig = in=20 Deutschland: T=DCV-gepr=FCfter Virenschutz +++
100% Virenerkennung = nach=20 Wildlist. Infos: http://www.gmx.net/virenschutz

_______________________________________________
LARTC=20 mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9= a.nl/mailman/listinfo/lartc=20 HOWTO: http://lartc.org/
 

---
Outgoing mail is certified = Virus=20 Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: = 6.0.620=20 / Virus Database: 399 - Release Date:=20 11/3/2004
------=_NextPart_000_0016_01C40885.F0107720-- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/