Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to block MP3 download with L7 container???

    Traffic Shaping
    3
    16
    7.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Metu69salemi
      last edited by

      On the lanside: it is good practice to set rules in this order
      antilockout
      blocking rules
      allowing rules

      My question was, do you have blocking rule before allowing rules in lan ruleset?

      1 Reply Last reply Reply Quote 0
      • C
        c.h
        last edited by

        the pattern din't work maybe my rules aren't set like they should be

        -I have 1 LAN and 1 WAN as interfaces connected so I added a rule on the WAN for my PC's IP pass rule and chose the source as single host and http port 80 as port range
        for the destination i set it to : any
        and chose Layer 7 the mp3 protocol where i added my pattern

        -as for my LAN interface i added a rule using the same IP but as destination not source and the rest is configured exactly the same as on the WAN

        am I missing steps ?
        Yes the order I have is:
        Anti-lockout then the rule that i set it is pass bcz of the L7 i have to choose then the default allow rule is it right?
        no im tryin to make it work without squid
        Thanks GUYS

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by

          Yes you are.

          In pfsense rules work on ingress. if you want to handle lan machines while passing through pfsense, you should add rule on LAN not on WAN.

          Do you want to take screenshots of your lan and wan rules?

          1 Reply Last reply Reply Quote 0
          • C
            c.h
            last edited by

            These are my screen shots for the rules created I have used the wizard single LAN/single WAN the queues work but not the limiter or mp3 blocker what am i missing?




            1 Reply Last reply Reply Quote 0
            • M
              Metu69salemi
              last edited by

              I'm not using L7 so the answer isn't so exact. but what does behaviour "new", what happens if you change it to "action"

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                I just tested with SSH, and it works. What is your current snapshot?

                1 Reply Last reply Reply Quote 0
                • C
                  c.h
                  last edited by

                  "new " is the limiter 1kbps i created
                  I tried to apply it in the L7  and try to download a normal mp3 song from the net it doesn't limit the download speed to 1k

                  and even if I try to use the limiter named "new" in the out/in like the pic i added now also not the result i want

                  i dint understand the SSH thing ? u mean u turned the webGui protocol to https and it worked?  :P
                  THANKS

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    No i mean't that i tried limiting and blocking with ssh connection, because that i can test remotely with ease

                    1 Reply Last reply Reply Quote 0
                    • C
                      c.h
                      last edited by

                      oh i see

                      can u put some of ur screen shot maybe i can figure out and make it work ????
                      so @ least due to ur reply m sure traffic shaping and blockin and limiters work in pfsense RC3 now
                      Thx

                      1 Reply Last reply Reply Quote 0
                      • M
                        Metu69salemi
                        last edited by

                        Two simple ones. see attachments

                        l7-created.png
                        l7-created.png_thumb
                        l7-in-use.png
                        l7-in-use.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • C
                          c.h
                          last edited by

                          THANKSs

                          did u try the limiter???
                          and for ur rule what did u apply or create? floating ,LAN,WAN …???

                          1 Reply Last reply Reply Quote 0
                          • M
                            Metu69salemi
                            last edited by

                            in opt2 interface which is renamed, work as lan. didn't try limiter yet

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.