Revisions
-
rampageX created this gist
Nov 5, 2019 .There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,24 @@ # Block Torrent algo string using Boyer-Moore (bm) iptables -A FORWARD -m string --algo bm --string "BitTorrent" -j DROP iptables -A FORWARD -m string --algo bm --string "BitTorrent protocol" -j DROP iptables -A FORWARD -m string --algo bm --string "peer_id=" -j DROP iptables -A FORWARD -m string --algo bm --string ".torrent" -j DROP iptables -A FORWARD -m string --algo bm --string "announce.php?passkey=" -j DROP iptables -A FORWARD -m string --algo bm --string "torrent" -j DROP iptables -A FORWARD -m string --algo bm --string "announce" -j DROP iptables -A FORWARD -m string --algo bm --string "info_hash" -j DROP iptables -A FORWARD -m string --algo bm --string "/default.ida?" -j DROP iptables -A FORWARD -m string --algo bm --string ".exe?/c+dir" -j DROP iptables -A FORWARD -m string --algo bm --string ".exe?/c_tftp" -j DROP # Block Torrent keys iptables -A FORWARD -m string --algo kmp --string "peer_id" -j DROP iptables -A FORWARD -m string --algo kmp --string "BitTorrent" -j DROP iptables -A FORWARD -m string --algo kmp --string "BitTorrent protocol" -j DROP iptables -A FORWARD -m string --algo kmp --string "bittorrent-announce" -j DROP iptables -A FORWARD -m string --algo kmp --string "announce.php?passkey=" -j DROP # Block Distributed Hash Table (DHT) keywords iptables -A FORWARD -m string --algo kmp --string "find_node" -j DROP iptables -A FORWARD -m string --algo kmp --string "info_hash" -j DROP iptables -A FORWARD -m string --algo kmp --string "get_peers" -j DROP iptables -A FORWARD -m string --algo kmp --string "announce" -j DROP iptables -A FORWARD -m string --algo kmp --string "announce_peers" -j DROP