UPM Institutional Repository

Detecting and preventing peer-to-peer connections by Linux iptables


Othman, Mohamed and Kermanian, Mostafa Nikpour (2008) Detecting and preventing peer-to-peer connections by Linux iptables. In: 3rd International Symposium on Information Technology (ITSim'08), 26-28 Aug. 2008, Kuala Lumpur, Malaysia. .


Most of companies use Linux iptables as their edge networks’ firewall. Although Linux iptables is a reputed secure stateful packet filter firewall package, it has some weaknesses. This package can not detect or control all peer-to-peer connections. One of the packages which is written for Linux iptables to manage peer-to-peer connections is layer 7-module. This module can not detect all peer-to-peer connections and drop them. Some peer-to-peer connections which use HTTP port for connecting to other peers are detected with this netfilter’s patch-o-matic but those which use static ports or dynamic ports for connecting to peers can not be detected with this module. For controlling peer-to-peer connections investigator blocked some peer-to-peer well known static ports with Linux iptables and then, for increasing the control of other peer-to-peer applications which used dynamic ports, he used QOS rules. Although this trend could drop most of peer-to-peer connections and save internet bandwidth, it was not the complete solution. He decided to control peer-to-peer connections by implementing a new module which checks peer-to-peer payloads in his next investigation.

Download File

[img] Text (Abstract)
Detecting and preventing peer-to-peer connections by Linux iptables.pdf

Download (47kB)

Additional Metadata

Item Type: Conference or Workshop Item (Paper)
Divisions: Faculty of Computer Science and Information Technology
DOI Number: https://doi.org/10.1109/ITSIM.2008.4631860
Publisher: IEEE
Keywords: Linux iptables; Peer-to-peer connections
Depositing User: Nur Izyan Mohd Zaki
Date Deposited: 17 Nov 2009 01:27
Last Modified: 13 Jul 2020 03:49
Altmetrics: http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1109/ITSIM.2008.4631860
URI: http://psasir.upm.edu.my/id/eprint/2686
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item