From owner-freebsd-isp@FreeBSD.ORG  Mon Nov 28 08:00:45 2005
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
X-Original-To: freebsd-isp@freebsd.org
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 365B016A41F
	for <freebsd-isp@freebsd.org>; Mon, 28 Nov 2005 08:00:45 +0000 (GMT)
	(envelope-from krzychk2@o2.pl)
Received: from poczta.o2.pl (mx.go2.pl [193.17.41.41])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C314D43D60
	for <freebsd-isp@freebsd.org>; Mon, 28 Nov 2005 08:00:44 +0000 (GMT)
	(envelope-from krzychk2@o2.pl)
Received: from xdsl-4455.lodz.dialog.net.pl (xdsl-4455.lodz.dialog.net.pl
	[84.40.226.103]) by poczta.o2.pl (Postfix) with ESMTP id 3916513775D
	for <freebsd-isp@freebsd.org>; Mon, 28 Nov 2005 09:00:43 +0100 (CET)
Date: Mon, 28 Nov 2005 09:00:41 +0100
From: KrzychK2 <krzychk2@o2.pl>
X-Mailer: The Bat! (v3.5.26) Professional
X-Priority: 3 (Normal)
Message-ID: <1873935578.20051128090041@o2.pl>
To: freebsd-isp@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: P2P blocking
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: KrzychK2 <krzychk2@o2.pl>
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2005 08:00:45 -0000

Hello freebsd-isp!

I'd like to ask, is there any packet using kernel module for rejecting
p2p traffic by packet matching??

Snort isn't an option for me, because it very overloads system at high
traffic and it's very slow.

I'm thinking about something for netgraph subsystem.

-- 
Greetings,
 KrzychK2