<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Kazaa Filtering</title><link rel="stylesheet" href="html.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.73.2" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title"><a id="Shorewall_and_Kazaa"></a>Kazaa Filtering</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tom</span> <span class="surname">Eastep</span></h3></div></div></div><div><p class="copyright">Copyright © 2003-2005 Thomas M. Eastep</p></div><div><div class="legalnotice"><a id="id286316"></a><p>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled
“<span class="quote"><a class="ulink" href="GnuCopyright.htm" target="_self">GNU Free Documentation
License</a></span>”.</p></div></div><div><p class="pubdate">2008/12/15</p></div></div><hr /></div><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p><span class="bold"><strong>This article applies to Shorewall 3.0 and
later. If you are running a version of Shorewall earlier than Shorewall
3.0.0 then please see the documentation for that
release.</strong></span></p></div><p>Beginning with Shorewall version 1.4.8, Shorewall can interface to
ftwall. <span class="bold"><strong>ftwall</strong></span> is part of the <a class="ulink" href="http://p2pwall.sourceforge.net" target="_self">p2pwall project</a> and is a
user-space filter for applications based on the “<span class="quote">Fast Track</span>”
peer to peer protocol. Applications using this protocol include Kazaa,
KazaaLite, iMash and Grokster.</p><p>To filter traffic from your “<span class="quote">loc</span>” zone with ftwall, you
insert the following rules in the ESTABLISHED section of
/etc/shorewall/rules file after any DROP or REJECT rules whose source is the
“<span class="quote">loc</span>” zone.</p><pre class="programlisting"> #ACTION SOURCE DEST PROTO
QUEUE loc net tcp
QUEUE loc net udp
QUEUE loc $FW udp</pre><p>Now simply configure ftwall as described in the ftwall documentation
and restart Shorewall.</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>There are ftwall init scripts for use with
<span class="trademark">SUSE</span>™ and <span class="trademark">Debian</span>™ Linux at
<a class="ulink" href="http://shorewall.net/pub/shorewall/contrib/ftwall" target="_self">http://shorewall.net/pub/shorewall/contrib/ftwall</a>.</p></div><p>Shorewall versions 2.2.0 and later also include support for the ipp2p
match facility which can be use to control P2P traffic. See the <a class="ulink" href="IPP2P.html" target="_self">Shorewall IPP2P documentation</a> for details.</p></div></body></html>
