BFW Firewall & Router

por **Horus** » Sex Abr 02, 2010 7:18 pm

holas..

echandole mano a argento, probe bloquear los programas p2p pero igual me funcionan los que tengo (utorrent y ares),ares realiza las busquedas y tb descarga...

solo modifique
/argentoqos/block_protocol.conf

Código: Selecionar todos: #Perfil normal # #permit_protocol_ip ares 192.168.1.48 block_protocol_ip ares 192.168.10.69 block_protocol_ip bittorrent 192.168.10.69 block_protocol_ip edonkey 192.168.10.69 #block_protocol ares # #

el concheck

Código: Selecionar todos: Aviso: se recomienda leer e informarse sobre tipo de conecciones tcp, udp y de tipo L-7. Recordar que connlimit solo limita conecciones con protocolo tcp. Para limitar conecciones udp se recomienda utilizar el comando randomlimit y limit. ---------------------------------------------------------------------------------------------- Mostrando conecciones simultaneas por ip 192.168.10.1 .......tcp ASSURED: 12 TIME_WAIT: 4 UNREPLIED: 0 udp 1 Bittorrent 0 Ares 0 Edonkey 0 Fasttrack 0 192.168.10.69 .......tcp ASSURED: 30 TIME_WAIT: 33 UNREPLIED: 0 udp 106 Bittorrent 38 Ares 0 Edonkey 0 Fasttrack 0 Listo

Tabla mangle

Código: Selecionar todos: Chain PREROUTING (policy ACCEPT 410K packets, 228M bytes) pkts bytes target prot opt in out source destination 98 6483 MARK udp -- eth0 * 192.168.10.69 192.168.0.0/16 multiport ports 53,67,68 MARK set 0x5c9 6179 622K MARK tcp -- eth0 * 192.168.10.69 192.168.0.0/16 multiport ports 8180,22,80,8186,8187,4001,4080 MARK set 0x5c9 0 0 MARK icmp -- eth0 * 192.168.10.69 192.168.0.0/16 MARK set 0x5c9 6277 628K RETURN all -- eth0 * 192.168.10.69 0.0.0.0/0 MARK match 0x5c9 58197 21M MARK all -- eth0 * 192.168.10.69 0.0.0.0/0 MARK set 0x94 58200 21M IMQ all -- eth0 * 0.0.0.0/0 0.0.0.0/0 IMQ: todev 4 75830 34M MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x0 0 0 MARK all -- eth1 * 190.224.143.113 0.0.0.0/0 MARK set 0xbba 442 38511 MARK icmp -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb8 0 0 MARK esp -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK ah -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK 47 -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK esp -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK ah -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:9 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:20:21 MARK set 0xbbb 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:22 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:22 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:25 MARK set 0xbbb 113 43265 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:53 MARK set 0xbb8 7961 8009K MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:110 MARK set 0xbba 21 5057 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:443 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:465 MARK set 0xbbb 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:500 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:995 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:1863 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:1723 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:2082:2083 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:2095 MARK set 0xbba 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:3283 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:3283 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:3306 MARK set 0xbb9 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:4500 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:5000:5010 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spts:5000:5010 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5050 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5100 MARK set 0xbbb 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5101 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5222 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5223 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5432 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:5432 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5631 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:5631 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5800 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:5900 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:6891:6900 MARK set 0xbba 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:6901 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:6901 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:7001 MARK set 0xbb9 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:7001 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:7686 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:7666 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:7686 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:7666 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spts:8000:8002 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:10001 MARK set 0xbb9 300 15930 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:10000 MARK set 0xbb9 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:10051:10070 MARK set 0xbbb 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:10200 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:11161 MARK set 0xbbd 0 0 RETURN tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:11161 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:11165 MARK set 0xbbd 0 0 RETURN udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:11165 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:18624 MARK set 0xbbd 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spts:27000:27039 MARK set 0xbb8 0 0 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:27000:27039 MARK set 0xbb8 0 0 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spt:27898 MARK set 0xbb8 3697 3292K MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spts:64000:64754 MARK set 0xbbd 369 19637 MARK udp -- eth1 * 0.0.0.0/0 0.0.0.0/0 udp spts:64000:64754 MARK set 0xbbd 1 57 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto skypetoskype MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto stun MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ciscovpn MARK set 0xbb9 77 94343 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto flash MARK set 0xbb9 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto html MARK set 0xbb9 83 48814 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto gif MARK set 0xbb9 1070 1237K MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto jpeg MARK set 0xbb9 161 171K MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto png MARK set 0xbb9 17 4873 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ssl MARK set 0xbb9 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rdp MARK set 0xbb8 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto sip MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ftp MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rtsp MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto http-rtsp MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto msnmessenger MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto yahoo MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto jabber MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto irc MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto imap MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto msn-filetransfer MARK set 0xbba 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto pdf MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto exe MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rar MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto tar MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rpm MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto zip MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto quicktime MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto flv MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto httpvideo MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto quicktime MARK set 0xbbc 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto http-dap MARK set 0xbbc 36 2661 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto edonkey MARK set 0xbbd 9193 577K MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto directconnect MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto fasttrack MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto soulseek MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto gnutella MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto imesh MARK set 0xbbd 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto openft MARK set 0xbbd 54116 22M MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK match 0x0 MARK set 0xbbe 75777 34M IMQ all -- eth1 * 0.0.0.0/0 0.0.0.0/0 IMQ: todev 0 Chain INPUT (policy ACCEPT 29444 packets, 11M bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 381K packets, 217M bytes) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 192.168.1.48 MARK set 0xbb9 0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.48 0 0 MARK all -- * * 192.168.1.48 0.0.0.0/0 MARK set 0xbb9 0 0 RETURN all -- * * 192.168.1.48 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 35563 packets, 26M bytes) pkts bytes target prot opt in out source destination 102 33533 MARK udp -- * eth0 192.168.0.0/16 192.168.10.69 multiport ports 53,67,68 MARK set 0x5c9 8713 7435K MARK tcp -- * eth0 192.168.0.0/16 192.168.10.69 multiport ports 8180,22,80,8186,8187,4001,4080 MARK set 0x5c9 5 330 MARK icmp -- * eth0 192.168.0.0/16 192.168.10.69 MARK set 0x5c9 242 313K MARK all -- * eth0 0.0.0.0/0 192.168.10.69 TOS match 0x10 MARK set 0x5c9 Chain POSTROUTING (policy ACCEPT 407K packets, 243M bytes) pkts bytes target prot opt in out source destination 9062 7782K RETURN all -- * eth0 0.0.0.0/0 192.168.10.69 MARK match 0x5c9 73708 33M MARK all -- * eth0 0.0.0.0/0 192.168.10.69 MARK set 0x94 7277 7974K MARK tcp -- * * 0.0.0.0/0 192.168.10.69 tcp spt:8080 MARK set 0x94 7277 7974K RETURN tcp -- * * 0.0.0.0/0 192.168.10.69 tcp spt:8080 3 236 RETURN all -- * * 192.168.0.0/16 192.168.10.69 61745 21M MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0x0 0 0 MARK all -- * * 192.168.10.1 192.168.10.1 MARK set 0xbb8 0 0 RETURN all -- * * 192.168.10.1 192.168.10.1 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:20:21 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:47 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 flags:0x16/0x02 MARK set 0xbb8 549 32940 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:143 flags:0x16/0x02 MARK set 0xbb8 2 104 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:2083 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3283 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3389 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:5000:5010 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5050 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5100 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5432 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5631 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5900 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5800 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:6901 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7001 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7686 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7666 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:8000:8002 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:10200 flags:0x16/0x02 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:27000:27039 flags:0x16/0x02 MARK set 0xbb8 0 0 MARK all -- * eth1 0.0.0.0/0 190.224.143.113 MARK set 0xbba 119 10262 MARK icmp -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb8 0 0 MARK esp -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK ah -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK 47 -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK esp -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK ah -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0xbb9 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:9 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:20:21 MARK set 0xbba 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:22 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 MARK set 0xbbb 113 7351 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:53 MARK set 0xbb8 6229 1012K MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 MARK set 0xbbb 21 6892 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:465 MARK set 0xbbb 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:500 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:995 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:1863 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:2082:2083 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:2095 MARK set 0xbba 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:3283 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3283 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 MARK set 0xbb9 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:4500 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:5000:5010 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpts:5000:5010 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5050 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5101 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5100 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5222 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5223 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5432 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:5432 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5631 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:5631 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5800 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:5900 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:6891:6900 MARK set 0xbba 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:6901 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:6901 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7001 MARK set 0xbb9 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:7001 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7686 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:7666 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:7686 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:7666 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpts:8000:8002 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:10001 MARK set 0xbb9 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:10000 MARK set 0xbb9 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:10051:10070 MARK set 0xbbb 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:10200 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp spt:11161 MARK set 0xbbd 0 0 RETURN tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp spt:11161 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp spt:11165 MARK set 0xbbd 0 0 RETURN udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp spt:11165 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:18624 MARK set 0xbbd 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpts:27000:27039 MARK set 0xbb8 0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:27000:27039 MARK set 0xbb8 0 0 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpt:27898 MARK set 0xbb8 3905 2810K MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpts:64000:64754 MARK set 0xbbd 91 5607 MARK udp -- * eth1 0.0.0.0/0 0.0.0.0/0 udp dpts:64000:64754 MARK set 0xbbd 5 301 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto skypetoskype MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto stun MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ciscovpn MARK set 0xbb9 54 2808 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto flash MARK set 0xbb9 15 5900 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ssl MARK set 0xbb9 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rdp MARK set 0xbb8 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto sip MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto html MARK set 0xbba 62 3224 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto gif MARK set 0xbba 714 39826 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto jpeg MARK set 0xbbc 141 7296 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto png MARK set 0xbbb 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ftp MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rtsp MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto http-rtsp MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto msnmessenger MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto yahoo MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto jabber MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto irc MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto imap MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto msn-filetransfer MARK set 0xbba 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto pdf MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto exe MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rar MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto tar MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rpm MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto zip MARK set 0xbbc 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto quicktime MARK set 0xbbb 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto httpvideo MARK set 0xbbb 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto flv MARK set 0xbbb 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto quicktime MARK set 0xbbb 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto http-dap MARK set 0xbbb 56 4166 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto edonkey MARK set 0xbbd 3120 245K MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto directconnect MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto fasttrack MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto soulseek MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto gnutella MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto imesh MARK set 0xbbd 0 0 MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto openft MARK set 0xbbd 48128 17M MARK all -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK match 0x0 MARK set 0xbbe 11 854 DROP all -- * * 0.0.0.0/0 192.168.10.69 LAYER7 l7proto ares 9156 573K DROP all -- * * 0.0.0.0/0 192.168.10.69 LAYER7 l7proto bittorrent 10 792 DROP all -- * * 0.0.0.0/0 192.168.10.69 LAYER7 l7proto edonkey Chain l7-filter (0 references) pkts bytes target prot opt in out source destination

saludos

PD: solo uso el perfil normal

por **WTC2009** » Sex Abr 02, 2010 9:50 pm

si colocas esto en reglas personalzadas del firewall creo que ayudas a que no se descargue por ares

iptables -t mangle -A POSTROUTING -m layer7 --l7proto ares -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto bittorrent -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto fasttrack -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto gnutella -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto imesh -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soulseek -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto goboogy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto audiogalaxy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto directconnect -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soribada -j DROP :mrgreen:

por **Horus** » Sex Abr 02, 2010 10:41 pm

WTC2009 escreveu:si colocas esto en reglas personalzadas del firewall creo que ayudas a que no se descargue por ares

iptables -t mangle -A POSTROUTING -m layer7 --l7proto ares -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto bittorrent -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto fasttrack -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto gnutella -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto imesh -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soulseek -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto goboogy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto audiogalaxy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto directconnect -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soribada -j DROP

no quiero bloquear a todo la red, como aun estoy probando brazil antes de ponerlo en mi red, solo estoy yo conectado, pero en un futuro, me serviria, solo bloquear algunas ip... gracias por tu ayuda

___________________________________________________________________________________________________________________________________
estuve probando..

agregue a /argentoqos/block_protocol.conf

block_protocol ares
block_protocol bittorrent

y el ares no se conecta y el utorrent, sigue conectandose....

asi que no me esta funcionando block_protocol_ip ares 192.168.10.69

/argentoqos/class.conf

Código: Selecionar todos: enqueue_class_wan WAN_0 300 300 520 3000 4500 #define velocidades a una clase enqueue_wan_id WAN_0 300 #definimos backbones enqueue_parent 4 80000 80000 #lan #enqueue_parent 2 3500 3500 #cerquita #enqueue_parent 3 1800 1800 #no tan cerquita #localnet_no_squid 192.168.0.0/16 #parent_match_yes activamos el reconocimiento como trafico local de squid y de los puertos que especifiquemos en variables.conf #variable_qos La misma permite dfinir segun el perfil que se cargue el porcentaje de velocidad que tendra esa clase.. ##################################### enqueue_simple_class 4 148 300 520 3000 4500 parent_match_yes 20000 80000 20000 80000 variable_qos_yes enqueue_simple_id 4 148 192.168.10.69 bind_yes squid_yes zph_yes 0x10 mac_no 00:1d:72:55:e2:4f ##################################### ##################################### #enqueue_simple_class 4 348 8 32 32 1024 parent_match_yes 2000 4500 2000 4500 variable_qos_no #enqueue_simple_id 4 348 192.168.3.48 bind_yes squid_yes zph_yes 0x10 mac_no 00:1B:FC:4B:E0:31 ##################################### #enqueue_simple_class 3 25 8 32 32 1024 parent_match_yes 2000 4500 2000 4500 variable_qos_no #enqueue_simple_id 3 25 192.168.1.25 bind_yes squid_yes zph_yes 0x10 mac_no 00:1B:FC:4B:E0:31 ##################################### #enqueue_simple_class 2 44 8 32 32 1024 parent_match_yes 2000 4500 2000 4500 variable_qos_no #enqueue_simple_id 2 44 192.168.1.44 bind_yes squid_yes zph_yes 0x10 mac_no 00:1B:FC:4B:E0:31 ##################################### # #dummytransp_ip 192.168.0.0/16 #

mi tabla nat

Código: Selecionar todos: Chain PREROUTING (policy ACCEPT 92513 packets, 6797K bytes) pkts bytes target prot opt in out source destination 94401 6895K nat-acl all -- * * 0.0.0.0/0 0.0.0.0/0 94401 6895K dns-preroute all -- * * 0.0.0.0/0 0.0.0.0/0 94401 6895K auto-forward all -- * * 0.0.0.0/0 0.0.0.0/0 94401 6895K port-forward all -- * * 0.0.0.0/0 0.0.0.0/0 116 6032 REDIRECT tcp -- eth0 * 192.168.10.69 0.0.0.0/0 tcp dpt:80 redir ports 8080 Chain POSTROUTING (policy ACCEPT 6657 packets, 424K bytes) pkts bytes target prot opt in out source destination 77878 5398K subnets-masks all -- * * 0.0.0.0/0 0.0.0.0/0 77878 5398K nat-masks all -- * * 0.0.0.0/0 0.0.0.0/0 6657 424K dns-postroute all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 6646 packets, 423K bytes) pkts bytes target prot opt in out source destination Chain auto-forward (1 references) pkts bytes target prot opt in out source destination Chain dns-postroute (1 references) pkts bytes target prot opt in out source destination Chain dns-preroute (1 references) pkts bytes target prot opt in out source destination Chain nat-acl (1 references) pkts bytes target prot opt in out source destination Chain nat-masks (1 references) pkts bytes target prot opt in out source destination 71221 4973K MASQUERADE all -- * eth1 192.168.10.0/24 0.0.0.0/0 Chain port-forward (1 references) pkts bytes target prot opt in out source destination Chain subnets-masks (1 references) pkts bytes target prot opt in out source destination

saludos..

por **nachazo** » Dom Abr 04, 2010 11:21 am

WTC2009 escreveu:si colocas esto en reglas personalzadas del firewall creo que ayudas a que no se descargue por ares

iptables -t mangle -A POSTROUTING -m layer7 --l7proto ares -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto bittorrent -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto fasttrack -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto gnutella -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto imesh -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soulseek -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto goboogy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto napster -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto audiogalaxy -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto directconnect -j DROP
iptables -t mangle -A POSTROUTING -m layer7 --l7proto soribada -j DROP

si colo caseso se ARMA LIO o como dicen en mi pagos se arma kil****!....

no mesclen cosas si no saben de iptables... segun todo lo que posteaste se esta bloqueando todo lo mas bien...

en el concheck te muestra quien usa esos protocolos los cuales fueron DROPEADOS.....

REITERO POR 123456789 VES L7 NO ES PERFECTO.....

por **nachazo** » Dom Abr 04, 2010 11:24 am

anda a conlimit y pone...

limit_unknow_ip_updown 300 tcp 192.168.1.45 50 #limita en clase unknow solamente con subida y a la ip o la subred deseada.
limit_unknow_ip_updown 300 udp 192.168.1.45 50 #limita en clase unknow solamente con subida y a la ip o la subred deseada.

en la ip remplazala por la tuya... o pone la subred que quieras.

el numero 50 es la cantidad de conecciones por segundo... si pones un numero menor a veces ni conecta el ares...

saludos.

por **nachazo** » Dom Abr 04, 2010 11:33 am

miren como limita una maquina con ares!!!

http://www.brazilfw.com.br/users/nachaz ... mangle.gif

primero veran una regla DROP de ARes que solo Dropea (bloquea) conecciones de solicitud de busquedas...

luego para la misma ip le puse las reglas del post de arriva y muetra como deja pasar cierta cantidad de trafico desconocido y luego lo DROPEA al exeder las 50 conecciones por segundo...

saludos.

BFW Firewall & Router

[1.1 rev4] no se bloquea ares ni utorrent [INACTIVE]

[1.1 rev4] no se bloquea ares ni utorrent

Re: [1.1 rev4] no se bloquea ares ni utorrent

Re: [1.1 rev4] no se bloquea ares ni utorrent

Re: [1.1 rev4] no se bloquea ares ni utorrent

Re: [1.1 rev4] no se bloquea ares ni utorrent

Re: [1.1 rev4] no se bloquea ares ni utorrent

Quem está online