P2P blocking

Overview

The goal of the IPP2P project is to identify peer-to-peer (P2P) data in IP traffic.

It appears the ipp2p project may now be defunct (at February 2010), although the maintainer of the smeserver-ipp2p packages is still releasing updates for each SME server kernel upgrade (as at May 2012 for SME 7.6.x).

	Note:
	The packages for this contrib must be recompiled for each released version of SME server and the corresponding kernel (and kernel mod) version. See this Forum thread for information regarding the current release status http://forums.contribs.org/index.php/topic,43669.0.html Also see Bugzilla:38 for information regarding development & maintenance.

Installation

The rpms are currently located here

http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/

Please manually check the latest released rpm version numbers, and use those version numbers in the commands below.

To download do

mkdir -p /temp/ipp2p
cd /temp/ipp2p
wget http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/smeserver-ipp2p-1.0-2.el4.sme.noarch.rpm
wget http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/ipp2p-0.8.2-4.el4.sme.i686.rpm
wget http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/kmod-ipp2p-0.8.2-1.2.6.9_103.EL.i686.rpm
wget http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/kmod-ipp2p-smp-0.8.2-1.2.6.9_103.EL.i686.rpm

If required, download and install the hugemem kmod module

wget http://jeremielorente.free.fr/linux/sme/contribs/ipp2p/kmod-ipp2p-hugemem-0.8.2-1.2.6.9_103.EL.i686.rpm

Install the rpms

cd /temp/ipp2p
yum localinstall *.rpm

Configuration

Enabling

set configuration values for various networks
The default is disabled, ie no blocking of p2p
bit = bittorrent and ipp2p = are the common protocols, the others are less common and not as well tested.

config setprop ipp2p apple enabled
config setprop ipp2p bit enabled
config setprop ipp2p ares enabled 
config setprop ipp2p ipp2p enabled
config setprop ipp2p soul enabled 
config setprop ipp2p winmx enabled 

check settings are correct

config show ipp2p

apply changes and restart server

signal-event remoteaccess-update

Disabling

To disable blocking setprop to disabled

config setprop ipp2p apple disabled
config setprop ipp2p bit disabled
config setprop ipp2p ares disabled 
config setprop ipp2p ipp2p disabled
config setprop ipp2p soul disabled 
config setprop ipp2p winmx disabled

apply changes and restart server

signal-event remoteaccess-update

Uninstallation

yum remove smeserver-ipp2p

---