Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
I know. But yes it is to not get provider fees or shutdown. When I'll have more fees from my service, a rural wireless service provider, I'll acquire space in some IXP and then mount a vmd based host. >Hope you are doing well, Fighting hard because I'm a victim of human trade. Kindly regards, O

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread deich...@placebonol.com
On May 9, 2022 2:16:51 AM MDT, Stuart Henderson wrote: > SNIP > (anyway, by the time you have used DPI >to detect the protocol, it is too late to make a decision on packet >routing). SNIP Well, not necessarily true, imagine GCHQ ... Just saying Hope you are doing well, diana

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
Correct it simple pass through interfaces: root@arnuwanda:/etc# ipsecctl -sa | grep 94.72.143.163 flow esp in proto gre from 94.72.143.163 to 65.20.98.172 peer 94.72.143.163 srcid ASN1_DN//C=ES/ST=Madrid/L=Madrid/O=Telecom Lobby/OU=VPNC/CN= choopa.telecomlobby.com dstid ASN1_DN//C=BG/ST=Lovech/L=T

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Stuart Henderson
On 2022/05/09 10:46, Riccardo Giuntoli wrote: > Yes I know. With rdomains and pair it would be nice to write a daemon > that inspect L7 search for bittorrent identification and take action > above those packets.  > Yes. DMCA is a complete overkill. Vultr applies it. When business will It doesn't m

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
Yes I know. With rdomains and pair it would be nice to write a daemon that inspect L7 search for bittorrent identification and take action above those packets. Yes. DMCA is a complete overkill. Vultr applies it. When business will grow I will host in some data center a pair of servers and do vmd ma

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Stuart Henderson
On 2022-05-09, Riccardo Giuntoli wrote: > I've found a distfiles on the fr openbsd mirror: > > https://ftp.fr.openbsd.org/pub/OpenBSD/distfiles/ndpi-4.2.tar.gz > > Someone try it? This is used by ntopng, we don't have anything to use this to make packet forwarding decisions (anyway, by the time y

Re: deep packet inspection over no TLS/SSL traffic

2022-05-08 Thread Riccardo Giuntoli
It could be and I already done using rdomains, pair and pf match with tag and pass with route-to. What I just start to use (yesterday after writing this email) is in the head of the wireless internet service provider, one application of my network, is using nDPI iptables module in mangle PREROUTIN

Re: deep packet inspection over no TLS/SSL traffic

2022-05-08 Thread Fabio Martins
On Sunday, May 8, 2022, Riccardo Giuntoli wrote: > Hello there, I've got a little wireless service provider where the edge > connect to different VPS providers in many geographic locations. One of > them, based in US, is applying DMCA doing DPI above no encrypted traffic. > > Now all my VPS are O

deep packet inspection over no TLS/SSL traffic

2022-05-08 Thread Riccardo Giuntoli
Hello there, I've got a little wireless service provider where the edge connect to different VPS providers in many geographic locations. One of them, based in US, is applying DMCA doing DPI above no encrypted traffic. Now all my VPS are OpenBSD I want to apply the same policy to not incur in servi