url filter not use proxy

[rda]

1. download new version
http://hotfile.com/dl/84764894/898cfa0/ZeroShell-1.0.beta13-1.rar.html
http://hotfile.com/dl/92052321/a096dc2/Zeroshell-1.0Beta13-1-CompactFlash-IDE-USB-STAT-1.5GB.img.gz.html
2.
SECURITY/Firewall
New Chain (example urlfilter)
3.
Add FORWARD Rule
Sequence 1
Protocol Matching TCP
Dest.Port 80
IPTABLES Parameters -m string –string GET –algo kmp –from 32 –to 64
ACTION CHAIN Jump to urlfilter
4.
Add urlfilter Rules
Sequence 1
Protocol Matching TCP
Dest.Port 80
#example block http://www.google.com
IPTABLES Parameters -m string –string http://www.google.com –algo kmp
ACTION REJECT with tcp reset
#example block x.google.com.x
IPTABLES Parameters -m string –string .google.com. –algo kmp

tcp-reset only support route mode and nat mode
not support bridge mode

[Author]

Posts