查看完整版本: Netscreen防火墙命令行下限BT下载

Netscreen防火墙命令行下限BT下载

可供参考：
Setp 1 --- Define service  
==========================
set service "BitComet_Handshake" protocol tcp src-port 0-65535 dst-port 1025-65535  
set service "http8080" protocol tcp src-port 0-65535 dst-port 8080-8080  


Sept 2 --- Define Signature for tracker query
==============================================

set attack "CS:BT-TRACK:1" http-url-variable-parsed ".*\[attachmentid\].*" severity info
set attack "CS:BT-TRACK:2" stream256 ".*\[announce\].*" severity info
set attack "CS:BT-TRACK:3" http-url-parsed ".*\[torrent\].*" severity info

--- Define some signature that will match HTTP request to download "*.torrent" file.
--- This will apply to HTTP or customized HTTP service port, such as tcp port 8080.


Sept 3 --- Define Signature for Handshake
==========================================

set attack "CS:Bitcomet:HandShake" stream256 ".*\[BitTorrent protocol\].*" severity info
--- Define attack signature for blocking BitTorrent handshake.


Stpe 4 --- Define tracker query attack group for referenced in policy
==================================================================
set attack group "CS:Bitcomet:Track"
set attack group "CS:Bitcomet:Track" add "CS:BT-TRACK:2"
set attack group "CS:Bitcomet:Track" add "CS:BT-TRACK:3"
set attack group "CS:Bitcomet:Track" add "CS:BT-TRACK:1"


Stpe 5 --- Define Handshake attack group for referenced in policy
==================================================================
set attack group "CS:BitComet:HandShake"
set attack group "CS:BitComet:HandShake" add "CS:Bitcomet:HandShake"


Step 6 --- Policy for tracker query for standard HTTP service
==============================================================
set policy id 3 from "Trust" to "Untrust" "Any" "Any" "HTTP" permit log  
set policy id 3 attack "CS:Bitcomet:Track" action close
set policy id 3  
exit


Step 7 --- Policy for tracker query for customized HTTP service
=================================================================
set policy id 4 from "Trust" to "Untrust" "Any" "Any" "http8080" permit  
set policy id 4 attack "CS:Bitcomet:Track" action close
set policy id 4 application "http" ---- ? option
set policy id 4  
exit


Step 8 --- Policy peer Handshake
=================================================================
set policy id 5 from "Trust" to "Untrust" "Any" "Any" "BitComet_Handshake" permit  
set policy id 5 application "TALK"
set policy id 5 attack "CS:BitComet:HandShake" action close
set policy id 5  
exit

非常谢谢楼猪~~~~~~~~~

duoxie!!!!

还有这样的设置哦，我也来设置下，看怎么样。呵呵

不知道用起来是不是可行，方案看起来还挺简洁的。

这么多啊~~~~~~~~~~~~~~~~~

这样简单的设置就可以命令行下限BT下载，感觉还行！

不错.......................

[[i] 本帖最后由 tudimiao 于 2008-1-10 10:39 编辑 [/i]]

偶是新手如果楼主可以用中文说明下就好了太专业了

哦,好难哦,全是英文的偶看不懂呀,不想看了

)("hnci) sh}:oq%

就这么简单的几行命令真的可以吗？有点难以置信,呵呵。

*liu(xig wu**li)

貌似 会封掉带有/announce/ URL的正常网页吧

这个配置ok吗~12+

xiexielouzhu