+ Responder ao Tópico



  1. #1

    Padrão Erro Ao Aplicar Regras No Layer7

    Pessoal tinha recompilado meu kernel no fedora core6 e apliquei o layer7 para bloquear algums p2p e o msn., tava tudo funcionando perfeitamente., mas do nada apareceu uma mansagem de erro ao tentar executar as regras.
    as regras são descritas abaixo
    #!/bin/sh
    #
    echo "================================================= ==============="
    echo " Bloquear Softwares P2P
    echo "================================================= ===============
    #
    iptables -I FORWARD -m layer7 --l7proto edonkey -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto edonkey -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto fasttrack -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto fasttrack -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto directconnect -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto directconnect -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto bittorrent -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto bittorrent -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto napster -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto napster -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto soulseek -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto soulseek -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto gnutella -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto gnutella -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto msnmessenger -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto msnmessenger -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto imesh -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto imesh -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto ares -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto ares -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto counterstrike-source -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto counterstrike-source -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto doom3 -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto doom3 -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto dayofdefeat-source -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto dayofdefeat-source -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto halflife2-deathmatch -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto halflife2-deathmatch -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto quake-halflife -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto quake-halflife -s any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto quake1 -d any/0 -j DROP
    iptables -I FORWARD -m layer7 --l7proto quake1 -s any/0 -j DROP

    #
    echo "================================================= ==============="
    echo " FIM DOS BLOQUEIOS
    echo "=================================================

    E os erros são esse aqui
    ================================================= ===============
    Bloquear Softwares P2P
    echo ================================================= ===============
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    ================================================= ===============
    FIM DOS BLOQUEIOS
    echo =========================================

    Alguém faz idéia do que pode ter ocorrido., tava funcionando tudo perfeitamente.

  2. #2

    Padrão

    Isso acontecia comigo também, e inclui uma linha que fazia a carga dos módulos referentes no início do script.

    Mas com certeza deve ter outra forma de resolver isso a nível de S.O.

    Abraço