Hi, Even if it would be supported there is no much use of iptables l7 filters. They never worked as expected. Get yourself a small juniper srx :)
2015-12-01 19:51 GMT+02:00 Peter Ludikovsky <pe...@ludikovsky.name>: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > According to to project site [0] there hasn't been any real > development since 2013, which was a patch against the 2.6 kernel line. > That kernel line is out of support since mid-2015. > > I'm afraid the string matching module would be your best bet for now. > > Regards, > /peter > > [0] http://l7-filter.clearos.com/ > > Am 01.12.2015 um 08:56 schrieb Muhammad Yousuf Khan: > > Hello, > > > > i am using Debian jessie and I have been trying to work with L7 > > filter to block p2p but its not working > > > > iptables -I FORWARD -m layer7 --l7proto bittorrent -j DROP iptables > > v1.4.21: Couldn't load match `layer7':No such file or directory > > > > Try `iptables -h' or 'iptables --help' for more information. > > > > can you guys Please help. string match with ip tables is easy but > > i am looking to use L7 filter on jessie. all the how-tos are out > > dated. example kernel patch etc. > > > > Please help. > > > > Thanks, Yousuf > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.22 (MingW32) > > iQIcBAEBAgAGBQJWXd4OAAoJEM+6Ng5pbtyZAd8P/3vM3gVfiaUcVVdxsNPkRIzb > NddWvxnWwYp4DNCHRj5sKAJ4X5DhdqClEysT8eLMBfG+IXLW44mF/M3NBeVsbMAk > 5ugH4hlyaIK2Pxh1yIHOCz1uP7yRnj8X6ASp5PxbzBTowmHLynjyka0OnEdg0pR4 > hsNvw9RyxPKPuqBTXy37SXGbp8mBmuFbQucaX7G80e8n5reCL9CvLTHKLiQ3BGdc > KanmYQjZ7K1/FISuBpl653iiR/Kpb4bfY2x2Nl54Pxs2ueFMwskIqsfGyxU6nSPb > Hk9OpDpJlQ14PTxZ2Tw/tvPJIhFqvQshrVD57OvQhgXrda+7o/sz1DbL5djLSAPj > b05luaVW9U+88XgAkcNPNZfrohy3JY1EnXPY5n3M83yZZ7QPPlwxc66Nu2PBS/rM > B0erP4t0c2tqxpMoewSmlX3Q0qm83IRET9ozSMqoEWbFYho499MR+uyTCkw1YO05 > JfHS/4o/t+z9PzHo1h2r0tqij52WcgeD4TSZ8W4MdZxMmwk6w+XOsJYDpY7eX2gt > a6IRr5/pgzv6PLWjpXSwj1XCtQUxoZkWS7GPF5qfbBh1/t3hjRe6Hv8MwQPP0oSw > LelvMIhii2NVvlPueuSWH46XencEQId66wTkAx02YxP84FMctw7jJl7oljb/JrQ7 > EXo9Iaaohz1ZjLSH3+Ht > =rHnt > -----END PGP SIGNATURE----- > > -- Best regards, Roman.
