Layer 7 rule

terryd

Hi I have created a layer 7 container to block torrents
bittorrent action block

I have then created a floating rule
action pass
interface lan
protocol tcp/udp

and in the advanced section selected by container name

but using abc torrent downloader as a test I am still able too down load the freebsd iso

Have I done it right ?
Thanks

2.0-RELEASE (i386)
built on Tue Sep 13 17:28:43 EDT 2011

terryd

also tried creating a lan rule and updated too
2.0.1-RELEASE (i386)
built on Mon Dec 12 18:24:17 EST 2011
FreeBSD 8.1-RELEASE-p6

cleared states and I can still download

Cry Havok

It might help if you were to provide screenshots of the configurations of both of those, so that people know what you've done.

terryd

Container

Floating

Lan

Hope this helps a bit
Thanks

all so tried one for ssh too with out success

tomato3017

I would also like to know. I am in a similar situation and documentation in this area is sparse.

terryd

So does any have a working rule for this they could share please ?
Just so I can compare
Thanks

MrsPotter

I'm experiencing the opposite: whenever I add a L7 rule - doesn't matter if it is on WAN, LAN or floating interface - all traffic is halted.

My settings look identical to that of @terryd.

Strange…

BTW, I'm running 2.01 with squid/squid filter. Not that squid should make any difference.