Project

General

Profile

Actions

Bug #433

closed

layer7 not blocking anything

Added by João Seabra over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
03/17/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.0
Affected Architecture:

Description

Going to Firewall -> Traffic shaper -> Layer7 and then creating a new l7 rules group where I:
-Enable layer7 Container
-give a name and description
and then on protocol/structure/behaviour add
bittorrent,action,block
skypeout,action,block
skypetoskype,action,block

has no effect in blocking skype or bittorrent.
Using 17 Mar snapshot

Actions #1

Updated by João Seabra over 11 years ago

João Seabra wrote:

Going to Firewall -> Traffic shaper -> Layer7 and then creating a new l7 rules group where I:
-Enable layer7 Container
-give a name and description
and then on protocol/structure/behaviour add
bittorrent,action,block
skypeout,action,block
skypetoskype,action,block

has no effect in blocking skype or bittorrent.
Using 17 Mar snapshot

Don't know if it matters but WAN is using PPPoE

Actions #2

Updated by Ermal Luçi over 11 years ago

Try with latest snapshot should be ok for your test case.

Patches committed.

Actions #3

Updated by Ermal Luçi over 11 years ago

  • Status changed from New to Feedback
Actions #4

Updated by Chris Buechler over 11 years ago

  • Status changed from Feedback to New

bittorrent at least still doesn't work.

Actions #5

Updated by Ermal Luçi over 11 years ago

  • Status changed from New to Feedback

It should be ok on latest snapshots.
Otherwise please attach a traffic trace.

Actions #6

Updated by Chris Buechler over 11 years ago

  • Subject changed from layer7 not blocking with bittorrent/skype to layer7 not blocking anything
  • Category set to Rules / NAT
  • Status changed from Feedback to New

doesn't appear to matter what you put into a L7 config, it doesn't work. Easy test: create one that blocks HTTP, kill states, you can still browse HTTP all you want.

Actions #7

Updated by Chris Buechler over 11 years ago

  • Status changed from New to Closed

replaced by #636

Actions

Also available in: Atom PDF