Go Back   Phoenix Labs > Projects > PeerGuardian Linux
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes

 
Old 08-28-2005, 08:59 AM   #1

Country:
Posts: n/a
Default Peerguard working on Clarkconnect (3) mini-howto

Thanks to JFM it would appear that you can now run this on Clarkconnect V3 without too much hassle, here is how.

First you are going to need to download a few packages.

You'll need to type the following

apt-get install cc-devel

This gets you the compiler you need. You also need libipq but this is not supplied with Clarkconnect. You can download the iptables 1.2.9 package from here

http://ftp.netfilter.org/pub/iptables/

You'll need 1.2.9 so download it, unpack it, and install the libraries

tar xvf tables1.2.9.tar
cd iptables-1.2.9/
make install-devel

This will install the libipq stuff you need. Now you are set to compile the peerguardian files. Go to where you downloaded 1.5beta(or whatever you use) make/install it.

I needed a quick start script so i made one in /bin called startpeerguardian contents are

Code:
#!/bin/sh
peerguardnf -d -c /etc/PG.conf -l /var/log/PG.log -h -m
You'll need a PG.conf file too, I got the tarball of peerguardian, and it has one in it you can use, the only thing i've done is add a few ports to it and set the path to the blockfile.

You can can test its all working right by running peerguardian (using above script for example), and then grep for an ip (you want to test) in the blockfile, and then ping that IP. Also examine your log file to see that packets for that ip are dropped (and logged).

If you have pgtext open, you'll see the packets getting dropped. If you get a ping response, it hasnt worked.

There is a sticky at the top which outlines the rules and order of execution, in my case its a problem and I have to add some forwarding rules first. (JFM is this explanation right?).

I'll try and answer any questions you might have.

Good luck.
  Reply With Quote

 
Old 08-29-2005, 02:12 AM   #2

Country:
Posts: n/a
Default

dugg,

thanks, I had just decided to somehow use PG w/my CC 3.1 box and came across your post. Im with ya all the up to where you add some custom rules...I wanna make sure I do that correctly. So Ill do the following:

Install cc-devel, install the libipq stuff, compile pg1.5, make my pg.conf and start script and then add these 3 rules -

iptables -I FORWARD 1 -j QUEUE
iptables -I OUTPUT 1 -j QUEUE
iptables -I INPUT 1 -j QUEUE

and then all should be well right?
  Reply With Quote

 
Old 08-29-2005, 02:51 AM   #3

Country:
Posts: n/a
Default

Went ahead and did the above, thats all thats needed...thanks for the mini howto dugg, got me going just fine.
One change I made is instead of making its own script, I placed the cmd to start pg in rc.local, dont have to worry about it starting when the machine reboots that way.
  Reply With Quote

 
Old 08-29-2005, 03:53 AM   #4

Country:
Posts: n/a
Default

sigtom,

Yeah thats a much better solution (to use rc.local). I think I'll make the switch too

Happy to hear you have it working, I was desperatley wanting to stop using protowall on this PC as the gateway would filter for all PCs on the network and using protowall really slowed down my local network traffic when shifting large amounts of data around. Now its all sweet.
  Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 07:23 AM.


  

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
© Phoenix Labs Staff