Openvpn – How to prevent users filesharing on an openvpn network (all traffic redirected through tunnel set to on)

bittorrentopenvpn

I'm in the process of setting up an openvpn service for fellow friends (10 – 50) who live in remote countries and would like to get access to various websites. I've got it working great for me but before I let anyone on I want to prevent filesharing programmes from using my server for obvious reasons. Whilst I trust my friends to be law abiding citizens it's all too easy for them to forget that they have the tunnel switched on and start downloading something they shouldn't be.

How can I go about preventing this or limiting this? I've heard it can be tricky. I've heard of squid. Can that help? I could create a whitelist perhaps – it's only 20 or so sites people can't access so it's feasible (not ideal though).

Whilst I'll be offering this to friends, associates, etc., I'll be doing it as a limited company and will explain this to any users who sign up and clearly state it in the TOS. It's a very small gig, but i still have to be careful.

Best Answer

Have a look at:

  • l7-filter - Application Layer Packet Classifier for Linux
  • IPP2P - IPP2P is a netfilter extension to identify P2P filesharing traffic.