Tom Eastep 2004-02-04 2003-2004 Thomas M. Eastep Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled GNU Free Documentation License. Beginning with Shorewall version 1.4.8, Shorewall can interface to ftwall. ftwall is part of the p2pwall project and is a user-space filter for applications based on the Fast Track peer to peer protocol. Applications using this protocol include Kazaa, KazaaLite, iMash and Grokster. To filter traffic from your loc zone with ftwall, you insert the following rules near the top of your /etc/shorewall/rules file (before any ACCEPT rules whose source is the loc zone). #ACTION SOURCE DEST PROTO QUEUE loc net tcp QUEUE loc net udp QUEUE loc fw udp Now simply configure ftwall as described in the ftwall documentation and restart Shorewall. There are ftwall init scripts for use with SuSE and Debian Linux at http://shorewall.net/pub/shorewall/contrib/ftwall.