Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Using L7 to block embedded video and audio traffic

    Scheduled Pinned Locked Moved Traffic Shaping
    12 Posts 6 Posters 16.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      shawniverson
      last edited by

      What specific kind of embedded video and audio are you trying to block?

      httpvideo and httpaudio is specific to RFC 2616 traffic, a very specific kind of stream using http.

      I.E.  This would not match Youtube traffic, for example.

      1 Reply Last reply Reply Quote 0
      • C Offline
        chuksonpfsense
        last edited by

        I wouldn't know what "RFC 2616 traffic" is but i meant like embedding video in ".flv" format in a web page. Check this site for example:

        http://www.chelseadaft.org/

        The video at the right side of the page starts playing as soon as you open the page. That's the kind of embedded video i'm looking to block.

        Thank you

        1 Reply Last reply Reply Quote 0
        • M Offline
          markuhde
          last edited by

          @chuksonpfsense:

          I wouldn't know what "RFC 2616 traffic" is but i meant like embedding video in ".flv" format in a web page. Check this site for example:

          http://www.chelseadaft.org/

          The video at the right side of the page starts playing as soon as you open the page. That's the kind of embedded video i'm looking to block.

          Thank you

          That's not what those profiles block.

          1 Reply Last reply Reply Quote 0
          • C Offline
            chuksonpfsense
            last edited by

            What kind of traffic does "httpvideo" block then? I looked at the .pat file of the profile, i discovered that the code is same with what is used to block such embedded videos in mikrotik routers, infact i have used it and successfully block such videos.

            Any suggestion on how to block or filter such embedded video?

            Thanks.

            1 Reply Last reply Reply Quote 0
            • E Offline
              eri--
              last edited by

              You have to tweak the number of packets sent up to the layer7 daemon.
              Normally its sendign only 5 [packets which might not be enough for the regex to match.

              1 Reply Last reply Reply Quote 0
              • C Offline
                chuksonpfsense
                last edited by

                how and where do i do the tweaking?

                does it mean after tweaking, i can use the "httpvideo" protocol?
                please a little more insight so i can get it done.

                1 Reply Last reply Reply Quote 0
                • A Offline
                  abubin
                  last edited by

                  have you tried using flash instead in L7 filter?

                  I am trying to limit bandwidth for youtube right now. I am using L7 with flash and httpvideo. It seems to be working in causing the videos not to load. I am actually trying to limit the bandwidth with 2m line. But instead, the videos just doesn't load for me. Once I disable that filter, youtube works again. So I am pretty sure that one of those filters are blocking youtube.

                  1 Reply Last reply Reply Quote 0
                  • F Offline
                    Fehler20
                    last edited by

                    I can confirm, that httpvideo catches YouTube Video traffic. Maybe you have to specify WAN, because the regex maches the Response, not the request.

                    have you tried using flash instead in L7 filter?

                    I am trying to limit bandwidth for youtube right now. I am using L7 with flash and httpvideo. It seems to be working in causing the videos not to load. I am actually trying to limit the bandwidth with 2m line. But instead, the videos just doesn't load for me. Once I disable that filter, youtube works again. So I am pretty sure that one of those filters are blocking youtube.

                    I was able to configure this Scenario with 2.1beta. So theoretically it should be possible :).

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      abubin
                      last edited by

                      hmm..any notable problem with 2.1beta? If no major problem then I will upgrade to it. Else I have to stick with stable release.

                      1 Reply Last reply Reply Quote 0
                      • F Offline
                        Fehler20
                        last edited by

                        Have now tried with 2.0.3. It works, too. Only difference to your config is that I filter both wan and lan.

                        Or maybe your ethernet nic is not compatible with queues.

                        1 Reply Last reply Reply Quote 0
                        • A Offline
                          abubin
                          last edited by

                          i am currently using 2.0.3.

                          IP limit is working when I limit them to IP addresses. Only when I use limit on L7 youtube and flash, it cause that problem. Any idea how I can check what is the exact problem? Should I post my configs here? BTW, I am using LIMITER in the L7 config not QUEUE.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.