Question : Control/block Bittorrent Traffic Using A Linux Firewall

Hello,

I run a VPN service, I have OpenVPN and PPTP.

Because of to much abuse from our hosting provider, we have to block P2P and Bittorent for our clients.

VPN servers are running as gateway.

Iptables rules for NAT:
SNAT       all  --  192.168.0.0/24       anywhere            to:IP_ADDRESS #PPTP
SNAT       all  --  10.8.0.0/24          anywhere            to:IP_ADDRESS  #OpenVPN

I already blocked port 6969 and install IPP2P module for iptables but it's not working good.

I need a 99% solution.

Please recommend me something.
Also please recommend me something for VPN bandwidth monitoring on Linux.
P.S. OS: Ubuntu 8.10, 2.6.27-7-server SMP

Answer : Control/block Bittorrent Traffic Using A Linux Firewall

bandwidth monitoring:

MRTG http://oss.oetiker.ch/mrtg/
CACTI http://www.cacti.net/

for p2p blockage you will have a problem..., it can use almost any port, many technologies etc.
To what extent is it possible to use a proxy for html access? only allow mailout from a mailserver and so on i.e. use whitelisting in your Firewall.
Then the number of open ports is limited.

If possible limit UPNP control of a modem (to allow specific port forwading to a client).