Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
en:dpi:dpi_options:opt_filtration:filtration_ctrl:start [2023/11/27 15:07] – elena.krasnobryzh | en:dpi:dpi_options:opt_filtration:filtration_ctrl:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Management ====== | ||
- | {{indexmenu_n> | ||
- | In order to filter a traffic of some particular subscribers, | ||
- | |||
- | < | ||
- | |||
- | As a result, this service is configured on level of individual subscribers by [[en: | ||
- | |||
- | Instruction format: | ||
- | < | ||
- | fdpi_ctrl command --service 4 [IP_list] | ||
- | </ | ||
- | <note important> | ||
- | |||
- | <note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en: | ||
- | |||
- | Examples: | ||
- | |||
- | Activate the service for all subscribers and switch filtering off for an administrator: | ||
- | < | ||
- | fdpi_ctrl load --service 4 --cidr 192.168.0.0/ | ||
- | fdpi_ctrl del --service 4 --ip 192.168.0.1 | ||
- | </ | ||
- | |||
- | Enable the service for an independent system AS50538: | ||
- | < | ||
- | fdpi_ctrl load --service 4 --cidr 37.110.240.0/ | ||
- | </ | ||
- | |||
- | Creating named profile and activating it to several subcribers | ||
- | < | ||
- | fdpi_ctrl load profile --service 4 --profile.name test_black --profile.json '{ " | ||
- | fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.1 | ||
- | fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.2 | ||
- | </ | ||
- | here\\ | ||
- | in json format sets folowing profiles' | ||
- | redirect - web page to redirect to\\ | ||
- | federal : 0/1/2/etc. using local athorities blacklist\\ | ||
- | url_list - URL blacklist\\ | ||
- | ip_list - IP: | ||
- | cn_list - Common Name blacklist | ||
- | |||
- | Blacklist can be loaded from external source, like " | ||
- | |||
- | Searching subscribers with named profile: | ||
- | < | ||
- | fdpi_ctrl list all --service 4 --profile.name test_black</ | ||
- | |||
- | Deleting subscribers with named profile (the named profile has no subscribers using it) | ||
- | < | ||
- | fdpi_ctrl del profile --service 4 --profile.name test_black | ||
- | </ | ||
- | |||
- | Changing parameters of named profile (new settings apply to all subscribers with the named profile) | ||
- | < | ||
- | fdpi_ctrl load profile --service 4 --profile.name test_black --profile.json '{ " | ||
- | </ | ||
- | |||
- | Maximum number of profiles for blacklist service is configuerd by a parameter in / | ||
- | < | ||
- | max_profiles_black_list=64 | ||
- | </ | ||
- | here\\ | ||
- | 64 default value, 65535 maximum value\\ | ||
- | <note warning> | ||
- | |||
- | =====Activation of IPv6 traffic blocking service===== | ||
- | Instruction format: | ||
- | <code bash> | ||
- | fdpi_ctrl команда --service 49 [Services_list] [IP_list or login] | ||
- | </ | ||
- | <note important> | ||
- | |||
- | Activate the service: | ||
- | <code bash> | ||
- | fdpi_ctrl load --service 49 --login DEMO | ||
- | </ | ||
- | or | ||
- | <code bash> | ||
- | fdpi_ctrl load --service 49 --vchannel 1 | ||
- | </ | ||
- | |||
- | <note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en: | ||
- | |||
- | ===== Configuring TCP and UDP protocol blocking ===== | ||
- | The '' | ||
- | |||
- | To start blocking UDP protocols (e.g. QUIC), it is necessary to add the '' | ||
- | <code bash> | ||
- | udp_block=3 | ||
- | </ | ||
- | |||
- | Adding a parameter does not require a DPI restart, just a reload: | ||
- | <code bash> | ||
- | service fastdpi reload | ||
- | </ | ||