Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to block MP3 download with L7 container???

    Traffic Shaping
    3
    16
    7.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      not sure about L7 but do you have squid setup? You could just block the ext *.mp3 from being downloading i believe.

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        On the lanside: it is good practice to set rules in this order
        antilockout
        blocking rules
        allowing rules

        My question was, do you have blocking rule before allowing rules in lan ruleset?

        1 Reply Last reply Reply Quote 0
        • C
          c.h
          last edited by

          the pattern din't work maybe my rules aren't set like they should be

          -I have 1 LAN and 1 WAN as interfaces connected so I added a rule on the WAN for my PC's IP pass rule and chose the source as single host and http port 80 as port range
          for the destination i set it to : any
          and chose Layer 7 the mp3 protocol where i added my pattern

          -as for my LAN interface i added a rule using the same IP but as destination not source and the rest is configured exactly the same as on the WAN

          am I missing steps ?
          Yes the order I have is:
          Anti-lockout then the rule that i set it is pass bcz of the L7 i have to choose then the default allow rule is it right?
          no im tryin to make it work without squid
          Thanks GUYS

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            Yes you are.

            In pfsense rules work on ingress. if you want to handle lan machines while passing through pfsense, you should add rule on LAN not on WAN.

            Do you want to take screenshots of your lan and wan rules?

            1 Reply Last reply Reply Quote 0
            • C
              c.h
              last edited by

              These are my screen shots for the rules created I have used the wizard single LAN/single WAN the queues work but not the limiter or mp3 blocker what am i missing?




              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                I'm not using L7 so the answer isn't so exact. but what does behaviour "new", what happens if you change it to "action"

                1 Reply Last reply Reply Quote 0
                • M
                  Metu69salemi
                  last edited by

                  I just tested with SSH, and it works. What is your current snapshot?

                  1 Reply Last reply Reply Quote 0
                  • C
                    c.h
                    last edited by

                    "new " is the limiter 1kbps i created
                    I tried to apply it in the L7  and try to download a normal mp3 song from the net it doesn't limit the download speed to 1k

                    and even if I try to use the limiter named "new" in the out/in like the pic i added now also not the result i want

                    i dint understand the SSH thing ? u mean u turned the webGui protocol to https and it worked?  :P
                    THANKS

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by

                      No i mean't that i tried limiting and blocking with ssh connection, because that i can test remotely with ease

                      1 Reply Last reply Reply Quote 0
                      • C
                        c.h
                        last edited by

                        oh i see

                        can u put some of ur screen shot maybe i can figure out and make it work ????
                        so @ least due to ur reply m sure traffic shaping and blockin and limiters work in pfsense RC3 now
                        Thx

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by

                          Two simple ones. see attachments

                          l7-created.png
                          l7-created.png_thumb
                          l7-in-use.png
                          l7-in-use.png_thumb

                          1 Reply Last reply Reply Quote 0
                          • C
                            c.h
                            last edited by

                            THANKSs

                            did u try the limiter???
                            and for ur rule what did u apply or create? floating ,LAN,WAN …???

                            1 Reply Last reply Reply Quote 0
                            • M
                              Metu69salemi
                              last edited by

                              in opt2 interface which is renamed, work as lan. didn't try limiter yet

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.