Install l7-filter module for Iptables

By Kendy Hikaru -
Preparing:
To use menuconfig:
yum install -y ncurses-devel
Download required packages
Download L7-filter kernel
wget http://downloads.sourceforge.net/l7-filter/netfilter-layer7-v2.19.tar.gz

Download L7-filter Protocol definitions
wget http://sourceforge.net/projects/l7-filter/files/Protocol definitions/2009-05-28/l7-protocols-2009-05-28.tar.gz
Download Linux Iptables 1.4.0
wget http://www.netfilter.org/projects/iptables/files/iptables-1.4.0.tar.bz2
Download Linux Kernel 2.6.26
wget http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.tar.bz2
Extract it:
tar xvf linux-2.6.26.tar.bz2
tar xvf netfilter-layer7-v2.19.tar.gz
Apply patch to Linux kernel source
cd linux-2.6.26
patch -p1 < ../netfilter-layer7-v2.19/kernel-2.6.25-layer7-2.19.patch

Apply patch & install iptables 1.4.0
tar -xvf iptables-1.4.0.tar.bz2
cd iptables-1.4.0
patch -p1 < ../netfilter-layer7-v2.19/iptables-1.4-for-kernel-2.6.20forward-layer7-2.19.patch
chmod +x extensions/.layer7-test
=== modified file 'extensions/libxt_sctp.c'

 #include
 #include
 #include
+#include

 #include
make KERNEL_DIR=~/linux-2.6.26
make install KERNEL_DIR=~/linux-2.6.26

Installing protocol definitions

tar -xvf l7-protocols-2008-04-23.tar.gz
cd l7-protocols-2008-04-23
mkdir /etc/l7-protocols
cp protocols/* /etc/l7-protocols

Compiling & installing new linux kernel

cd linux-2.6.26
make menuconfig

* "Network packet filtering framework(Netfilter)" (Networking → Networking option)
* "Netfilter connection tracking support" (... → Network packet filtering framework(Netfilter) → Core Netfilter Configuration)
* "Connection tracking flow accounting" (on the same screen)
* Finally, "Layer 7 match support"

make all
make modules_install
make install

Check GRUB setting

vim /etc/grub.conf


default=0
timeout=3
splashimage=(hd0,0)/grub/splash.xpm.gz
hiddenmenu
title CentOS (2.6.26)
        root (hd0,0)
        kernel /vmlinuz-2.6.26 ro root=/dev/VolGroup00/LogVol00 rhgb quiet
        initrd /initrd-2.6.26.img
title CentOS (2.6.18-53.el5)
        root (hd0,0)
        kernel /vmlinuz-2.6.18-53.el5 ro root=/dev/VolGroup00/LogVol00 rhgb quiet
        initrd /initrd-2.6.18-53.el5.img

Finally, restart the system:
init 6

Test l7-filter
iptables -m layer7 --help


Txt: http://www.mediafire.com/?qd3wqtxhqfe829a
------------------------------------------------------------
Thanks for reading
--------------------------------------------------------------------------
All my Lab:
Linux Lab -- window and Cisco Lab
to be continued - I will update more. 

Comments

Post a Comment

Popular posts from this blog

Python - Multithread to read one file

By Kendy Hikaru -
Today, i am working with python. I need write script to read one file, and get line by line, per line deliver one thread process ( total 10 threads). I want solution, so i chose working with thread and queue.
In python, when procsess initializate, this process will be assigned with queue, and working with this queue. We will put data ( in this case is line) to queue. Process will read from queue, so, all processes can read one file, not overlap :D

import threading
import Queue

#Number of threads
n_thread = 5
#Create queue
queue = Queue.Queue()

class ThreadClass(threading.Thread):
    def __init__(self, queue):
        threading.Thread.__init__(self)
    #Assign thread working with queue
        self.queue = queue

    def run(self):
        while True:
        #Get from queue job
            host = self.queue.get()
            print self.getName() + ":" + host
        #signals to queue job is done
            self.queue.task_done()

#Create number process
for i in range(n_thre…
Read more

Install Xposed Inspector and Frida on Genymotion

By Kendy Hikaru -
Image
Today i had some work with android. So i need trace application. I found 2 nice tool can help me:
Xposed Inspector and Frida. To setup there, i used Genymontion with x86 Emulator (quick start and light).
First create custom phone with Android 6.
1. Install Xposed Inspector
Inspeckage Inspector is one module of Xposed, so i need install Xposed before. Your phone need to be rooted (Default genymotion phone is rooted). You need download:
- Genymotion-ARM-Translation_v1.1.zip
- xposed-v80-sdk23-x86.zip (Exactly version with android api)
- XposedInstaller_3.0_alpha4
- Inspeckage Download at: https://acpm.mobi/genymotion-xposed-inspeckage.
Drag and drop Genymotion-ARM-Translation_v1.1.zip and xposed-v80-sdk23-x86.zip to phone, it will be flashed. Reboot.
After reboot, drag and drop XposedInstaller_3.0_alpha4 and Inspeckage to install apk.
Enable Inspeckage module and reboot (with xposed reboot function).
After reboot, start Inspeckage to monitor your app.
Port map: adb forward tcp:8008 tcp:…
Read more

OpenCA tutorial

By Kendy Hikaru -
Image
Install OpenCA tutorial

#yum install -y openssl-devel db4 db4-devel mysql-server mysql-devel perl-XML-Parser httpd
# rpm -Uvh openca-tools-1.3.0-1.el5.i386.rpm
# tar xvf openca-base-1.1.1.tar.gz
# cd openca-base-1.1.1
# mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 7
Server version: 5.0.77 Source distribution

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.


mysql> create database openca;
Query OK, 1 row affected (0.00 sec)

mysql> GRANT ALL PRIVILEGES ON *.* TO 'openca'@'localhost' IDENTIFIED BY '123456';
Query OK, 0 rows affected (0.00 sec)

# mysql -u openca -p

./configure --prefix=/opt/openca \
                 --with-ca-organization="HBN CA Labs" \
                 --with-httpd-fs-prefix=/var/www \
                 --with-httpd-main-dir=pki \
                 --with-db-name=openca \
                 --with-db-host=localhost \
         …
Read more