Using L7-filterto block p2p program(bt, e-mule)
Due to that the upstream or official kernel doesn't include it, we have to patch the kernel ourself OS : Ubuntu7.10 Package : netfilter-layer7-v2.14.tar.gz, l7-protocols- 2007-11-03 .tar.gz, iptables- 1.3.8 .tar.bz2 linux-source- 2.6.22 .tar.bz2 Patches are available for 2.6 We need to patch the source of iptables to enable L7-filter (1)Get kernel from http://www.kernel.org source code (2)Download the protocol definitions from above site http://sourceforge.net/projects/l7-filter (3)Download the protocol definitions from above site http://netfilter.org/ Start to patch and compile Kernel for 2.6.23 [/usr/src]$tar jxvf linux-source- 2.6.22 .tar.bz2 [/usr/src]$tar zxvf netfilter-layer7-v2.14.tar.gz [/usr/src]$mv netfilter-layer7-v2.14 netfilter-layer7 [/usr/src]$cd netfilter-layer7 [/usr/src/netfilter-layer7]$cp kernel- 2.6.22 -layer7-2.14.patch ../linux-source-2.6.22 [/usr/src/netfilter-layer7]$cd ../linux-source- 2.6....