linux(Centos5.1)升级至2.6.19内核+L7实现-- 续限P2P软件

续前文；随意写了几个命令。来充分利用L7的优势。据测试的效果还是不错的。下面是我的部分IPTABLES。请注意。有可能重复限制了BT EMULE等了。IXPUB技术博客5Qie7Zz;wI8V

*s(w4qdp2I
R6l){0 [root@nginx-http ipp2p-0.8.2]# iptables-save
1n,E:\O\Q;f~f0 # Generated by iptables-save v1.3.7 on Wed Jan  9 18:10:10 2008IXPUB技术博客/cN1|%\"p.@\h
*mangleIXPUB技术博客 z?B7|6u{
:PREROUTING ACCEPT [39560:5353718]IXPUB技术博客]/~:s;T,sAL\
:INPUT ACCEPT [516:35974]IXPUB技术博客{+I3a"``Tv9z.Gcz
:FORWARD ACCEPT [39043:5317714]IXPUB技术博客M?*vLd+h3Sl{
:OUTPUT ACCEPT [484:34806]
(I@~Q.C,l0 :POSTROUTING ACCEPT [15217:3724119]
4M;cg$GZ3Yw`yh0 -A POSTROUTING -m layer7 --l7proto skypetoskype -j Drop
V
m;\.v0h)C.V e0 -A POSTROUTING -m layer7 --l7proto skypeout -j Drop IXPUB技术博客 [ s AdYzg/v
-A POSTROUTING -m layer7 --l7proto edonkey -j Drop
6V6lX(gr5vZ,^0 -A POSTROUTING -m layer7 --l7proto fasttrack -j Drop IXPUB技术博客)sa#g9K&K5p
-A POSTROUTING -m layer7 --l7proto bittorrent -j Drop IXPUB技术博客:i-xZ [0_d|3{`
COMMITIXPUB技术博客$Qi6k8C)\:^
# Completed on Wed Jan  9 18:10:10 2008
ap;E,hE2k0 # Generated by iptables-save v1.3.7 on Wed Jan  9 18:10:10 2008
B-S#D$lb.x0 *filterIXPUB技术博客:P7`0o.D\2_
:INPUT ACCEPT [524:36294]IXPUB技术博客#w3TgJL9k3M
:FORWARD ACCEPT [15294:3822741]
9t
I$N;er%OH/{F(RP0 :OUTPUT ACCEPT [500:37030]
1T"v Fe4m[E\hS0 -A FORWARD -m layer7 --l7proto edonkey -j Drop
c9S{ w(Y$lF4O0 -A FORWARD -m layer7 --l7proto bittorrent -j Drop
#D*j|](~ Do9tO0 COMMIT
s]5RWdW#g0?+?0 # Completed on Wed Jan  9 18:10:10 2008
8A;l?H dtA0 # Generated by iptables-save v1.3.7 on Wed Jan  9 18:10:10 2008
,M)i U$F2P2w-Q0 *nat
J^P'n|T{p${0 :PREROUTING ACCEPT [25468:1606241]
%[j)Wz:p8x2V8]8G0 :POSTROUTING ACCEPT [0:0]

W\2v7MN;J0 :OUTPUT ACCEPT [1:124]IXPUB技术博客?_3f$W[(J3l_2M&{
h
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -o ppp0 -j MASQUERADE IXPUB技术博客{0oO7aC U:i
-A POSTROUTING -s 10.0.10.0/255.255.255.0 -j MASQUERADE
!eW(Y/l,n$My0 COMMIT
bq1M3@m;EL+]8g-m7j1mf0 # Completed on Wed Jan  9 18:10:10 2008
7~6`&Z_!zR0 [root@nginx-http ipp2p-0.8.2]#
't8t8r$`;Az0

f:`,O.s H3X0 呵呵，系统显示的匹配策略来SHOW下效果：IXPUB技术博客oKl M-?Vlq
IXPUB技术博客f|rWRO*glYQ

$L!v)K{N2O0 [ 本帖最后由 rickyfang 于 2008-1-9 20:54 编辑 ]