*

p2p block

just a little howto set up a p2p block.

1. install the wanted software -> web gui -> status -> shaping

2. login per ssh

3. edit modules: vi /etc/modules.d/05-iptables add:

            ipt_ipp2p
            ipt_layer7

4. edit a startupscript: vi /etc/init.d/S91p2p_block add:

            #TCP filtering.
            iptables -I FORWARD -m ipp2p --edk -j DROP
            iptables -I FORWARD -m ipp2p --dc -j DROP
            iptables -I FORWARD -m ipp2p --kazaa -j DROP
            iptables -I FORWARD -m ipp2p --gnu -j DROP
            iptables -I FORWARD -m ipp2p --bit -j DROP
            iptables -I FORWARD -m ipp2p --apple -j DROP
            iptables -I FORWARD -m ipp2p --winmx -j DROP
            iptables -I FORWARD -m ipp2p --soul -j DROP
            iptables -I FORWARD -m ipp2p --ares -j DROP
            iptables -I FORWARD -m ipp2p --mute -j DROP
            iptables -I FORWARD -m ipp2p --waste -j DROP
            iptables -I FORWARD -m ipp2p --xdcc -j DROP
            #UDP filtering
            iptables -I FORWARD -p udp -m ipp2p --edk -j DROP
            iptables -I FORWARD -p udp -m ipp2p --kazaa -j DROP
            iptables -I FORWARD -p udp -m ipp2p --gnu -j DROP
            iptables -I FORWARD -p udp -m ipp2p --bit -j DROP

or more simple:

            #general filtering.
            iptables -I FORWARD -m ipp2p --ipp2p -j DROP

5. make the script executable:

            chmod +x /etc/init.d/S91p2p_block

6. reboot (Power Cycle)