Project

General

Profile

Bug #433

layer7 not blocking anything

Added by João Seabra over 9 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
03/17/2010
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.0
Affected Architecture:

Description

Going to Firewall -> Traffic shaper -> Layer7 and then creating a new l7 rules group where I:
-Enable layer7 Container
-give a name and description
and then on protocol/structure/behaviour add
bittorrent,action,block
skypeout,action,block
skypetoskype,action,block

has no effect in blocking skype or bittorrent.
Using 17 Mar snapshot

History

#1 Updated by João Seabra over 9 years ago

João Seabra wrote:

Going to Firewall -> Traffic shaper -> Layer7 and then creating a new l7 rules group where I:
-Enable layer7 Container
-give a name and description
and then on protocol/structure/behaviour add
bittorrent,action,block
skypeout,action,block
skypetoskype,action,block

has no effect in blocking skype or bittorrent.
Using 17 Mar snapshot

Don't know if it matters but WAN is using PPPoE

#2 Updated by Ermal Luçi over 9 years ago

Try with latest snapshot should be ok for your test case.

Patches committed.

#3 Updated by Ermal Luçi over 9 years ago

  • Status changed from New to Feedback

#4 Updated by Chris Buechler over 9 years ago

  • Status changed from Feedback to New

bittorrent at least still doesn't work.

#5 Updated by Ermal Luçi over 9 years ago

  • Status changed from New to Feedback

It should be ok on latest snapshots.
Otherwise please attach a traffic trace.

#6 Updated by Chris Buechler over 9 years ago

  • Subject changed from layer7 not blocking with bittorrent/skype to layer7 not blocking anything
  • Category set to Rules / NAT
  • Status changed from Feedback to New

doesn't appear to matter what you put into a L7 config, it doesn't work. Easy test: create one that blocks HTTP, kill states, you can still browse HTTP all you want.

#7 Updated by Chris Buechler about 9 years ago

  • Status changed from New to Closed

replaced by #636

Also available in: Atom PDF