odchytavanie a limitovanie sifrovanych p2p

[rado3105]

V mangle znacim pomocou allp2p p2p downloaderov, tych mi hadze do addresslistu.
Potom mam pravidlo kde odchytavam komunikaciu na portoch udp od 10 000 do 65535 ale len u ludi z addresslistu znacenych ako p2p downloaderi.
Potom mam pravidlo, ktore odchytava zvysnu udp komunikaciu.

A pravidla v QT pre llimitovanie p2p a ostatneho udp.

Problem je, ze tieto pravidla sa akosi blbo spravaju, - to co by malo byt chytene v mangle ako p2p-downloaderi sa presuva do marku ako ostatne udp.

[rado3105]

tymto pravidlo znacim p2p downloaderov:
3

Kód: Vybrat vše

 chain=forward action=add-dst-to-address-list p2p=all-p2p address-list=p2p-downloaders address-list-timeout=2h in-interface=ether1

chain=prerouting action=mark-packet new-packet-mark=games_in passthrough=no connection-mark=call_of_duty_2_udp_in_conn

toto by malo znacit ludi stahujucich p2p-downloaders a len pre nich je pravidlo v qt

Kód: Vybrat vše

46  chain=prerouting action=mark-connection new-connection-mark=p2p-down-conn passthrough=yes protocol=udp dst-address-list=p2p-downloaders
     in-interface=ether1 src-port=10000-65535

47   ;;; udp porty 10000-65535 do p2p_down(plati len pre p2p-downloaders)
     chain=prerouting action=mark-packet new-packet-mark=p2p_down passthrough=no in-interface=ether1 connection-mark=p2p-down-conn


tymto odchytavam ostatnu udp komunikaciu(okrem tych co su znaceni ako p2p-downloaders) ale problem je ze to odchytava aj ich komunikaciu. Viete poradit preco a kde moze byt problem?
48

Kód: Vybrat vše

chain=prerouting action=mark-packet new-packet-mark=udp_other_rx passthrough=no protocol=udp dst-address-list=!p2p-downloaders
     in-interface=ether1


ak nerozumiete mozem dat vstup do routera.