Subject: [alpine-devel] Re: [Shorewall-users] Questions about ipp2p and shorewall

From: Harry Lachanas <[email-masked]>
Date: Sun, 11 Jan 2009 13:56:32 +0200

This was published in the shorewall-users list ( by Tom ??? )
I think it might be interesting to some of us.

Cheers,
Harry.

----------------------------------------------------------------------------
Shorewall Guy wrote:
> [email-masked] wrote:
>
> c) I have been experimenting with the ipp2p module in xtables-addons 1.6
> and 1.7; my firewall won't run 5 minutes before crashing if I insert
> just a single ipp2p match rule. YMMV.

Update: xtables-addons 1.8 was released this morning and includes a
buffer underrun fix in xt_ipp2p.c. That, together with the attached
patch, are proving to be more stable on my firewall.
-----------------------------------------------------------------------------

--- xt_ipp2p.c~	2009-01-10 05:05:46.000000000 -0800
+++ xt_ipp2p.c	2009-01-10 08:44:52.000000000 -0800
@@ -782,7 +782,7 @@
 	{IPP2P_DATA_DC,     26, search_dc}, /* exp */
 	{IPP2P_DC,           5, search_all_dc},
 	{IPP2P_DATA_GNU,    40, search_gnu}, /* exp */
-	{IPP2P_GNU,          5, search_all_gnu},
+	{IPP2P_GNU,         22, search_all_gnu},
 	{IPP2P_KAZAA,        5, search_all_kazaa},
 	{IPP2P_BIT,         20, search_bittorrent},
 	{IPP2P_APPLE,        5, search_apple},

---

From: Natanael Copa <[email-masked]>
Date: Mon, 12 Jan 2009 11:59:21 +0100

> I think it might be interesting to some of us.

Yes, this was interesting, I am just about to revert to old ipp2p kernel
module. Is it ok that .29.1 has old ipp2p and old iptables? I think we
win some time and can test the xtables-addons-1.8 more carefully.

Thanks!

-nc

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---