how to block P2P traffic

[nhu]

Hello, i have Openvpn server to allow access to my network to a couple of people, but i want to prevent that this access will be use for P2P traffic. how can i configure the openvpn server to block P2P

Thank you

[maikcat]

hi there,

blocking traffic is not openvpn job to do so...
you can use iptables to drop traffic based on source/dest-protocol combinations..

cheers,

Michael.

[anonyproz]

Try setup suricata IDS/IPS on the server and get snort P2P rules. It works fine.

http://www.openinfosecfoundation.org/

[Bebop]

how can i configure the openvpn server to block P2P

Completely blocking P2P might be achieved by only allowing for TCP 443 (https), TCP 80 (http), and UDP 53 (dns) to forward out of the server, whilst blocking all other ports. A more flexible and reasonable approach will be this though:



Source: https://blog.torproject.org/running-exit-node

[bersa]

how can i configure the openvpn server to block P2P

Completely blocking P2P might be achieved by only allowing for TCP 443 (https), TCP 80 (http), and UDP 53 (dns) to forward out of the server, whilst blocking all other ports. A more flexible and reasonable approach will be this though:



Source: https://blog.torproject.org/running-exit-node

Hi,

I'm newbie do you have any reference how can I only allow the 80, 443, and 53 ports?

Thanks

[janjust]

this is not an OpenVPN question but a firewalling/routing question. On Linux you'd use iptables for this.