[NoCatNet] Nocat and layer7+ipp2p

Pulpo pulpo at chilesincables.org
Tue Jul 3 18:22:54 PDT 2007


Hi;

I manage a free-public wireless network, witch Nocat in Openmode, 
transparent proxy and layer7 and ipp2p to control and block (or try at 
least) p2p traffic.

My problem is  that when i run Nocat with the layer7 and ipp2p scripts 
(added at the bottom of initialize.fw file), the network stop working, 
this means there is no captive portal. I attach the scripts i am 
actually using, maybe somebody can helpme or guide me through, to make 
this scripts work with Nocat.

Thanks in advance.

P.S: Please excuse my terrible english :-o

--Bottom of initialize.fw--
#Ipp2p low rate
iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
iptables -t mangle -A PREROUTING -p tcp -m mark ! --mark 0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -m ipp2p --ares -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp -m mark --mark 1 -j CONNMARK 
--save-mark
iptables -t mangle -A POSTROUTING -o br0 -m mark --mark 1 -j CLASSIFY 
--set-class 1:12
iptables -t mangle -A POSTROUTING -o eth1 -m mark --mark 1 -j CLASSIFY 
--set-class 2:12

#layer7 drop rules
iptables -t mangle -A PREROUTING -m layer7 --l7proto ares -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto bittorrent -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto directconnect -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto edonkey -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto fasttrack -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto gnutella -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto goboogy -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto mute -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto openft -j DROP
iptables -t mangle -A PREROUTING -m layer7 --l7proto soulseek -j DROP

-- 
Human Knowledge Belongs to the Humanity
       Linux User #338337




More information about the NoCatNet mailing list