The pfSense Store

Author Topic: ipfw-classifyd skype block not work  (Read 2992 times)

0 Members and 1 Guest are viewing this topic.

Offline savago

  • Jr. Member
  • **
  • Posts: 58
    • View Profile
    • Power to serve
ipfw-classifyd skype block not work
« on: February 05, 2012, 12:46:19 pm »
Feb  5 20:44:46 openbsd ipfw-classifyd: Reloading config...
Feb  5 20:44:47 openbsd ipfw-classifyd: Loaded Protocol: skypeout (rule action block)
Feb  5 20:44:47 openbsd ipfw-classifyd: Loaded Protocol: skypetoskype (rule action block)
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Feb  5 20:44:47 openbsd ipfw-classifyd: unable to write to divert socket: Operation not permitted
Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

Offline cmb

  • Administrator
  • Hero Member
  • *****
  • Posts: 6288
    • LinkedIn
    • Twitter
    • View Profile
    • Chris Buechler
Re: ipfw-classifyd skype block not work
« Reply #1 on: February 08, 2012, 09:06:15 pm »
what version?

Offline savago

  • Jr. Member
  • **
  • Posts: 58
    • View Profile
    • Power to serve
Re: ipfw-classifyd skype block not work
« Reply #2 on: February 12, 2012, 03:31:30 am »
what version?
uname -isr
FreeBSD 8.1-RELEASE-p6 pfSense-embedded

 Welcome to pfSense 2.0.1-RELEASE-nanobsd (i386)
Sys 2.0-RC1: Intel Atom N330 Dual Core @1.6 2048M Ram 40GHD

Offline jarlel

  • Jr. Member
  • **
  • Posts: 64
    • View Profile
Re: ipfw-classifyd skype block not work
« Reply #3 on: February 14, 2012, 10:39:52 am »
I have the same issue - did you figure out this one?

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2753
    • View Profile
Re: ipfw-classifyd skype block not work
« Reply #4 on: March 19, 2012, 03:32:08 pm »
Hi,

I do have the same message in syslog:
Code: [Select]
Mar 19 19:40:21 ipfw-classifyd: unable to write to divert socket: Operation not permitted
Mar 19 18:49:22 dnsmasq[5936]: read /etc/hosts - 213 addresses
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: xunlei (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: thecircle (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: tesla (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: soulseek (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: soribada (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: pplive (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: poco (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: napster (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: mute (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: kugoo (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: ipp (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: gnutella (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: fasttrack (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: edonkey (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: directconnect (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: bittorrent (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: audiogalaxy (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: applejuice (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Loaded Protocol: 100bao (rule action block)
Mar 19 18:31:02 ipfw-classifyd: Reloading config...
Mar 19 18:31:02 php: : Sending HUP signal to 40262

Don't know what that means. Is this because an Layer 7 filter is working but runs into an error ?
I do not find anything what could explain me this message.

I am running pfsense 2.0.1 amd64
I am running this additional packages on this machine:
squid-reverse
squidguard
freeradius
cron

My system:
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
4GB RAM
WAN speed: 2x ADSL 16/1 Mbit/s
CPU usage: 2-3%
RAM usage: ~70% (squid cache)


Thanks for your help in advance!
« Last Edit: March 19, 2012, 03:37:01 pm by Nachtfalke »

Offline ermal

  • Administrator
  • Hero Member
  • *****
  • Posts: 3355
    • View Profile
Re: ipfw-classifyd skype block not work
« Reply #5 on: March 21, 2012, 05:04:29 am »
The skype pattern is not correct and needs to be fixed.
I noted this quite late so you have to edit or create a custom pattern for it to work.

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2753
    • View Profile
Re: ipfw-classifyd skype block not work
« Reply #6 on: March 21, 2012, 05:11:20 am »
The skype pattern is not correct and needs to be fixed.
I noted this quite late so you have to edit or create a custom pattern for it to work.

Hi ermal,

I do not use skype in layer 7. So is there another pattern which is not correct or is it another problem ?
Is there any other way to find out which pattern makes the problem instead of just select and unselect one ?

Thanks