Layer7 filtering doesn't seem to work

rojocesar

Today December 6… the problem still .. Layer7 filtering doesn't work STILL.. I hope fix the problem.. best regards

eri--

Can you show me your system logs.
Search for lines with ipfw-classifyd in them.

rojocesar

Here the information

Dec 8 16:34:16 ipfw-classifyd: Loaded Protocol: httpvideo (rule action block)
Dec 8 16:34:16 ipfw-classifyd: Loaded Protocol: msnmessenger (rule action block)
Dec 8 16:48:23 ipfw-classifyd: unable to initialize list of protocols: No such file or directory

eri--


Dec 8 16:48:23    ipfw-classifyd: unable to initialize list of protocols: No such file or directory

You have something wrong in your setup.

rojocesar

Hi!
What Can i do? Is the problem for default configuration? I reboot the pfsense and reset and only created 2 rules in Traffic Shaper..
Best regards

eri--

Can you execute ls -ld /usr/local/share/protocols and ls -l /usr/local/share/protocols

rojocesar

Dec 9 01:43:39 ipfw-classifyd: Loaded Protocol: skype (rule action block)
Dec 9 01:45:32 ipfw-classifyd: Loaded Protocol: http (rule action block)
Dec 9 02:03:01 ipfw-classifyd: Found Protocol: msnmessenger (rule action block)
I executed ls -ld /usr/local/share/protocols and ls -l /usr/local/share/protocols
but
The layer 7 doesn't block nothing, messenger… can you help me please

rojocesar

I prove the layer7 today 14 Dec.. and still doesn't seem to work.. anybody fix it.. thanks

rojocesar

Today December 15 the problem still, I download the last version of pfsense 2.0 alpha.
I'm testing the layer7 with the latest version of pfsense 2.0 but I notice that does not work. here send a picture.

danswartz

@rojocesar:

Dec 9 01:43:39 ipfw-classifyd: Loaded Protocol: skype (rule action block)
Dec 9 01:45:32 ipfw-classifyd: Loaded Protocol: http (rule action block)
Dec 9 02:03:01 ipfw-classifyd: Found Protocol: msnmessenger (rule action block)
I executed ls -ld /usr/local/share/protocols and ls -l /usr/local/share/protocols
but
The layer 7 doesn't block nothing, messenger… can you help me please

I think you were missing his point. The reason he wanted you to execute those commands was to paste the output into a message so he can see what might be wrong.