diff options
author | Hauke Mehrtens <hauke@hauke-m.de> | 2009-05-01 15:20:34 +0000 |
---|---|---|
committer | Hauke Mehrtens <hauke@hauke-m.de> | 2009-05-01 15:20:34 +0000 |
commit | e50d6f12f7844b84025282435042e6705b28cfea (patch) | |
tree | 6c1089621aa2f9bbf05a4f9379bbe81473c4d298 /package/iptables/files/l7/bittorrent.pat | |
parent | 9f10820e7c6b5c3a9aee7102462d261d8fb780fe (diff) | |
download | upstream-e50d6f12f7844b84025282435042e6705b28cfea.tar.gz upstream-e50d6f12f7844b84025282435042e6705b28cfea.tar.bz2 upstream-e50d6f12f7844b84025282435042e6705b28cfea.zip |
Update layer7 rules
SVN-Revision: 15544
Diffstat (limited to 'package/iptables/files/l7/bittorrent.pat')
-rw-r--r-- | package/iptables/files/l7/bittorrent.pat | 12 |
1 files changed, 5 insertions, 7 deletions
diff --git a/package/iptables/files/l7/bittorrent.pat b/package/iptables/files/l7/bittorrent.pat index e5aa5bc13d..4a3ba88d58 100644 --- a/package/iptables/files/l7/bittorrent.pat +++ b/package/iptables/files/l7/bittorrent.pat @@ -1,12 +1,12 @@ # Bittorrent - P2P filesharing / publishing tool - http://www.bittorrent.com -# Pattern attributes: good slow notsofast undermatch +# Pattern attributes: good slow594 notsofast undermatch # Protocol groups: p2p open_source # Wiki: http://www.protocolinfo.org/wiki/Bittorrent +# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE # # This pattern has been tested and is believed to work well. # It will, however, not work on bittorrent streams that are encrypted, since -# it's impossible to match encrypted data (unless the encryption is extremely -# weak, like rot13 or something...). +# it's impossible to match (well) encrypted data. bittorrent @@ -16,12 +16,10 @@ bittorrent # Next bit matches something Azureus does # Ditto on the next bit. Could also match on "user-agent: azureus", but that's in the next # packet and perhaps this will match multiple clients. - -# Recently the ^ was removed from before \x13. I think this was an accident, -# so I have restored it. +# bitcomet-specific strings contributed by liangjun. # This is not a valid GNU basic regular expression (but that's ok). -^(\x13bittorrent protocol|azver\x01$|get /scrape\?info_hash=)|d1:ad2:id20:|\x08'7P\)[RP] +^(\x13bittorrent protocol|azver\x01$|get /scrape\?info_hash=get /announce\?info_hash=|get /client/bitcomet/|GET /data\?fid=)|d1:ad2:id20:|\x08'7P\)[RP] # This pattern is "fast", but won't catch as much #^(\x13bittorrent protocol|azver\x01$|get /scrape\?info_hash=) |