Management [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_options:opt_filtration:filtration_ctrl [2020/02/05 17:29] – ↷ Page moved from en:dpi:dpi_options:base_functionality:opt_filtration:filtration_ctrl to en:dpi:dpi_options:opt_filtration:filtration_ctrl lexx26en:dpi:dpi_options:opt_filtration:filtration_ctrl [2025/12/16 13:45] (current) – elena.krasnobryzh
    Line 1: Line 1:
    -====== 3 Management ======+{{tag>Services "Service 4" Filtering Blacklist "Service 49" "IPv6 Blocking"}}
      
     +====== Management ======
     +{{indexmenu_n>3}}
     +In order to filter a traffic of some particular subscribers, or exclude filtering of transit traffic, or provide filtering to other operators as a service - you will need to activate Subscriber Management to control this service. Please add configuration parameter to the file /etc/dpi/fastdpi.conf to activate:
     +
     +<code>black_list_sm=1</code>
     +
     +As a result, this service is configured on level of individual subscribers by [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|fdpi_ctrl]].
     +
     +Instruction format:
     +<code>
     +fdpi_ctrl command --service 4 [IP_list]
     +</code>
     +<note important>You can find more details on the instruction syntax and IP specification methods here: [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|Control instructions]]</note>
     +
     +<note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|enable the]] ''[[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|udp_block]]'' parameter.</note>
     +
     +Examples:
     +
     +Activate the service for all subscribers and switch filtering off for an administrator:
     +<code>
     +fdpi_ctrl load --service 4 --cidr 192.168.0.0/24
     +fdpi_ctrl del --service 4 --ip 192.168.0.1
     +</code>
     +
     +Enable the service for an independent system AS50538:
     +<code>
     +fdpi_ctrl load --service 4 --cidr 37.110.240.0/21 --cidr 109.235.216.0/21
     +</code>
     + 
     +Creating named profile and activating it to several subcribers
     +<code>
     +fdpi_ctrl load profile --service 4  --profile.name test_black --profile.json '{ "url_list" : "http://mysite.ru/myfile.bin" , "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "http://mysite.ru/block", "federal" : 0 }'
     +fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.1
     +fdpi_ctrl load --service 4 --profile_name test_black --ip 192.168.0.2
     +</code>
     +here\\
     +in json format sets folowing profiles' parameters\\ 
     +redirect - web page to redirect to\\ 
     +federal : 0/1/2/etc. using local athorities blacklist\\ 
     +url_list - URL blacklist\\ 
     +ip_list - IP:PORT  blacklist\\ 
     +cn_list - Common Name blacklist
     +
     +Blacklist can be loaded from external source, like "http://mysite.ru/myfilecn.bin", or in a local file, like "cn_list" : "/tmp/cn_list.bin"
     +
     +Searching subscribers with named profile:
     +<code>
     +fdpi_ctrl list all --service 4 --profile.name test_black</code>
     +
     +Deleting subscribers with named profile (the named profile has no subscribers using it)
     +<code>
     +fdpi_ctrl del profile --service 4  --profile.name test_black
     +</code>
     +
     +Changing parameters of named profile (new settings apply to all subscribers with the named profile)
     +<code>
     +fdpi_ctrl load profile --service 4 --profile.name test_black --profile.json '{ "url_list" : "http://mysite.ru/myfile.bin" , "ip_list" : "http://mysite.ru/myfileip.bin", "cn_list" : "http://mysite.ru/myfilecn.bin", "redirect" : "http://mysite.ru/block", "federal" : false }'
     +</code>
     +
     +Maximum number of profiles for blacklist service is configuerd by a parameter in /etc/dpi/fastdpi.conf
     +<code>
     +max_profiles_black_list=64
     +</code>
     +here\\
     +64 default value, 65535 maximum value\\
     +<note warning>The parameter is applied after service restart.</note>
     +
     +=====Activation of IPv6 traffic blocking service=====
     +Instruction format:
     +<code bash>
     +fdpi_ctrl command --service 49 [Services_list] [IP_list or login]
     +</code>
     +<note important>You can find more details on the instruction syntax and IP specification methods here: [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd|Control instructions]]</note>
     +
     +Activate the service:
     +<code bash>
     +fdpi_ctrl load --service 49 --login DEMO
     +</code>
     +or
     +<code bash>
     +fdpi_ctrl load --service 49 --vchannel 1
     +</code>
     +
     +<note tip>When the service is activated, only TCP traffic is blocked. To block UDP traffic as well, you must [[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|enable the]] ''[[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd#configuring_tcp_and_udp_protocol_blocking|udp_block]]'' parameter.</note>
     +
     +----
     +Keywords: services, service, service list, subscriber management, service 4, service 49, filtering, blacklist, IPv6 blocking