Use Iptables to extend total blocking of peer-to-peer traffic

Linux is a good thing ah! Linux system is not only stable, relatively secure platform, but also open source and is free, which iptables is more powerful, so the author company has been using him to do the company's internal gateway, and through the iptables Setup to do some preliminary security aspects. So from the online query iptables information, oh, many netizens have done related attempts, and due to peer-to-peer in the network impact, so many linuxer have developed a related patch, specifically to deal with Peer-to-peer network performance of the adverse effects, Through the study of the vast majority of information on the Internet, see a number of solutions, see the most is the use of NetFilter Patch-o-matic-ng replenishment package, ipp2p patch, and then compile NetFilter, There is the first to compile the kernel and then combine a variety of software packages to complete this function, etc. all of the methods are the same, that is, must be patched first, to recompile the kernel, and then to make the function of the expansion, not to say how many patches correct application and recompile kernel steps of the mixed, A slightly unfamiliar kernel compilation or patch application can cause a version conflict, resulting in a failure of the entire process. The author uses many methods on the Internet, repeated testing, and finally can not be completely successful, there is always such a mistake, conflict! After about a week of repeated testing, and inspired by the online heroes, Finally, we found a simpler way to fully control the Peer-to-peer flow, which is characterized by no recompilation of the kernel and modules.

First, test the working environment:

RedHat Linux 9.0

Kernel version: 2.4.20-8

Second, the required software packages:

1.Netfilter of Iptables 1.2.9

Download location: Http://www.netfilter.org/project ... ables-1.2.9.tar.bz2

Get package as: iptables-1.2.9.tar.bz2

2. ip2pp 0.80

Download location: http://www.ipp2p.org/downloads/ipp2p-0.8.0.tar.gz

The package is: ipp2p-0.8.0.tar.gz

3. The iptables-p2p of SourceForge

Download location: http://sourceforge.net/projects/iptables-p2p