کد:
# Torrent ALGO Strings using Boyer-Moore
-A RH-Firewall-1-INPUT -m string –algo bm –string “BitTorrent” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “BitTorrent protocol” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “peer_id=” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “.torrent” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “announce.php?passkey=” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “torrent” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “announce” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “info_hash” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “/default.ida?” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “.exe?/c+dir” -j DROP
-A RH-Firewall-1-INPUT -m string –algo bm –string “.exe?/c_tftp” -j DROP
# Torrent Keys
-A RH-Firewall-1-INPUT -m string –string “peer_id” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “BitTorrent” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “BitTorrent protocol” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “bittorrent-announce” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “announce.php?passkey=” –algo kmp -j DROP
# Distributed Hash Table (DHT) Keywords
-A RH-Firewall-1-INPUT -m string –string “find_node” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “info_hash” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “get_peers” –algo kmp -j DROP
-A RH-Firewall-1-INPUT -m string –string “announce” –algo kmp -j DROP