Tiesse Imola 0220, User Manual

Page: 180 / 376

Firewall functions: IPTABLES
U
SER
G
UIDE
180
L
AYER
7
CLASSIFICATION
The router can recognize packets based on their application content and, consequently, it can
recognize the user sessions. The command is:
set iptables -t mangle -A POSTROUTING -m layer7 --l7proto <name> <action>
where
<name>
can identify a protocol, a file type, a malware or something else. Below you find the
list of the main
l7-proto
objects
Protocols:

100bao

aim, aimwebcontent, applejuice, ares, armagetron

battlefield1942, battlefield2142, battlefield2, bgp, biff, bittorrent

chikka, cimd, ciscovpn, citrix, counterstrike-source, cvs

dayofdefeat-source, dazhihui, dhcp, directconnect, dns, doom3

edonkey

fasttrack, finger, freenet, ftp

gkrellm, gnucleuslan, gnutella, goboogy, gopher, guildwars

h323, halflife2-deathmatch, hddtemp, hotline, http, http-rtsp

ident, imap, imesh, ipp, irc

jabber, kugoo

live365, liveforspeed, lpd

mohaa, msn-filetransfer, msnmessenger, mute

napste,r nbns, ncp, netbios, nntp, ntp

openft

pcanywhere, poco, pop3, pplive

qq, quake1, quake-halflife

radmin, rdp, replaytv-ivs, rlogin, rtp, rtsp, runesofmagic

shoutcast, sip, skypeout, skypetoskype, smb, smtp, snmp, socks, soribada, soulseek,
ssdp, ssh, ssl, stun, subspace, subversion

teamfortress2, teamspeak, telnet, tesla, tftp, thecircle, tonghuashun, tor, tsp

unknown, unset, uucp

validcertssl, ventrilo, vnc

whois, worldofwarcraft

x11, xboxlive, xunlei

yahoo, zmaap
File types

exe

flash

gif

html

jpeg

mp3

ogg

pdf

perl

png

postscript

rar

rpm

rtf

tar

zip
Malwares

code_red

nimda
Extras

audiogalaxy

gtalk

httpaudio

httpcachehit

httpcachemiss

http-dap

http-
freshdownload

http-itunes

httpvideo

pressplay

quicktime

snmp-mon

snmp-trap
Once classified, you can make various actions.