S
S
slavemaster2017-07-04 18:49:04
linux
slavemaster, 2017-07-04 18:49:04

How to detect p2p traffic on OpenVPN and reroute it through another vpn/proxy?

How to detect p2p traffic on OpenVpn and reroute it through another vpn/proxy?
The bottom line is that there is one VPN service that has this function implemented.
You connect as an example to England - Entry ip aaa.aaa.aaa.aaa - exit
aaa.aaa.aaa.aaa
How to do it, who can help for food :)
----

Answer the question

In order to leave comments, you need to log in

4 answer(s)
M
mureevms, 2017-07-04
@mureevms

I assume that the server does not determine the type of traffic. It only filters by ports. 80 and 443 for example, but they capture the lion's share of using the Internet, something like this:

iptables -t nat -A POSTROUTING -s $OpenVPN_Net -p tcp -m multiport --dport 80,443 -j SNAT --to-source ааа.ааа.ааа.ааа
iptables -t nat -A POSTROUTING -s $OpenVPN_Net -j  SNAT --to-source ввв.ввв.ввв.ввв

D
Dimonchik, 2017-07-04
@dimonchik2013

https://www.digitalocean.com/community/questions/u...
but in general the problem is more difficult, it's from the simplest

V
Victor Taran, 2017-07-05
@shambler81

the essence of p2p traffic is that it has nothing to catch on to.
Yes, there are trends, but there is no way to unequivocally state that this particular package needs to be blocked 100%.
Even a complete analysis of the package will not provide information about this, since it is encrypted, and the protocol is constantly changing from such cunning ones;) (plus it is resource-intensive)
ports are naturally not a problem for p2p, hosts, etc. too.
All that can be done is to reduce their number, but it is impossible to 100% swamp this traffic and even calculate it fully.

S
slavemaster, 2017-07-05
@slavemaster

I disagree and will give an example.
we drive in google nord vpn, download there is a trial for 3 days.
We connect to the England 63 server, check the ip and traceroute somewhere.
Let's start downloading the torrent.
I check the IP and the tracerout The
IP and the tracerout have changed.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question