* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
@ 2003-09-01 10:01 ` Tom Verbeek
2003-09-01 15:34 ` gypsy
` (5 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Tom Verbeek @ 2003-09-01 10:01 UTC (permalink / raw)
To: lartc
Hi Awie,
I you simply want to block Kazaa, you need to set up a Firewall that
is restrictive of outgoing requests (Kazaa does not need to have
incoming ports forwarded or open).
Block this Port 1214/TCP (incoming and outgoing).
Cheers,
Tom.
A> All,
A> I want to block (or limit) the Kazaa from our network. How can I do that?
A> What tools should I use?
A> PS. If the topic was already discussed, please tell me where I can get it.
A> Don't brush me off.
A> Thx & Rgds,
A> Awie
A> _______________________________________________
A> LARTC mailing list / LARTC@mailman.ds9a.nl
A> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
--
Word Perfect isn't, Excel doesn't, Works won't.
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
2003-09-01 10:01 ` Tom Verbeek
@ 2003-09-01 15:34 ` gypsy
2003-09-02 0:43 ` Rio Martin
` (4 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: gypsy @ 2003-09-01 15:34 UTC (permalink / raw)
To: lartc
Awie wrote:
>
> All,
>
> I want to block (or limit) the Kazaa from our network. How can I do that?
> What tools should I use?
>
> PS. If the topic was already discussed, please tell me where I can get it.
> Don't brush me off.
>
> Thx & Rgds,
>
> Awie
google "lartc blocking kazaa" or just "lartc kazaa".
http://www.lowth.com/p2pwall/ftwall/
gypsy
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
2003-09-01 10:01 ` Tom Verbeek
2003-09-01 15:34 ` gypsy
@ 2003-09-02 0:43 ` Rio Martin
2003-09-02 7:53 ` Awie
` (3 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Rio Martin @ 2003-09-02 0:43 UTC (permalink / raw)
To: lartc
On Monday 01 September 2003 17:01, Tom Verbeek wrote:
> Hi Awie,
> I you simply want to block Kazaa, you need to set up a Firewall that
> is restrictive of outgoing requests (Kazaa does not need to have
> incoming ports forwarded or open).
> Block this Port 1214/TCP (incoming and outgoing).
> Cheers,
> Tom.
Kazaa use random ports if you blocked tcp port 1214.
Have you checked this P2P software ? There is SOCKS support, so if you blocked
tcp port 1214, your users still able to comunicate with Kazaa gateway through
SOCKS proxy.
Perhaps you should take this as solution to your problem, blocked all tcp port
from 1 - 65535, list any ports to be allowed by your firewall.
Regards,
Rio Martin.
--
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
` (2 preceding siblings ...)
2003-09-02 0:43 ` Rio Martin
@ 2003-09-02 7:53 ` Awie
2003-09-02 8:07 ` Robert Penz
` (2 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Awie @ 2003-09-02 7:53 UTC (permalink / raw)
To: lartc
Thanks Rio, I will try.
Thx & Rgds,
Awie
----- Original Message -----
From: "Rio Martin" <rio@martin.mu>
To: <lartc@mailman.ds9a.nl>
Sent: Tuesday, September 02, 2003 8:43 AM
Subject: Re: [LARTC] Kazaa
> On Monday 01 September 2003 17:01, Tom Verbeek wrote:
> > Hi Awie,
> > I you simply want to block Kazaa, you need to set up a Firewall that
> > is restrictive of outgoing requests (Kazaa does not need to have
> > incoming ports forwarded or open).
> > Block this Port 1214/TCP (incoming and outgoing).
> > Cheers,
> > Tom.
>
> Kazaa use random ports if you blocked tcp port 1214.
> Have you checked this P2P software ? There is SOCKS support, so if you
blocked
> tcp port 1214, your users still able to comunicate with Kazaa gateway
through
> SOCKS proxy.
>
> Perhaps you should take this as solution to your problem, blocked all tcp
port
> from 1 - 65535, list any ports to be allowed by your firewall.
>
> Regards,
> Rio Martin.
> --
>
>
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
` (3 preceding siblings ...)
2003-09-02 7:53 ` Awie
@ 2003-09-02 8:07 ` Robert Penz
2003-09-02 9:28 ` miller69
2003-09-02 9:29 ` miller69
6 siblings, 0 replies; 8+ messages in thread
From: Robert Penz @ 2003-09-02 8:07 UTC (permalink / raw)
To: lartc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tuesday 02 September 2003 09:53, Awie wrote:
take a look at this
http://www.lowth.com/p2pwall/
- --
Regards,
Robert
- ----------
Robert Penz
robert dot penz at outertech dot com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
iD8DBQE/VE/C8tTsQqJDUBMRAoCUAJ4joIFL9H6TEvibAUzrsrAhc0ymewCgnlg7
/CYAyZBV1ZEmG/CfmNiipXk=d+oH
-----END PGP SIGNATURE-----
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
` (4 preceding siblings ...)
2003-09-02 8:07 ` Robert Penz
@ 2003-09-02 9:28 ` miller69
2003-09-02 9:29 ` miller69
6 siblings, 0 replies; 8+ messages in thread
From: miller69 @ 2003-09-02 9:28 UTC (permalink / raw)
To: lartc
> All,
>
> I want to block (or limit) the Kazaa from our network. How can I do that?
> What tools should I use?
>
> PS. If the topic was already discussed, please tell me where I can get it.
> Don't brush me off.
>
> Thx & Rgds,
>
> Awie
>
>
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
--
COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
--------------------------------------------------
1. GMX TopMail - Platz 1 und Testsieger!
2. GMX ProMail - Platz 2 und Preis-Qualitätssieger!
3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-Post
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread* Re: [LARTC] Kazaa
2003-09-01 8:49 [LARTC] Kazaa Awie
` (5 preceding siblings ...)
2003-09-02 9:28 ` miller69
@ 2003-09-02 9:29 ` miller69
6 siblings, 0 replies; 8+ messages in thread
From: miller69 @ 2003-09-02 9:29 UTC (permalink / raw)
To: lartc
Hi,
> I want to block (or limit) the Kazaa from our network. How can I do that?
> What tools should I use?
There is a tool called ipp2p to identify P2P traffic. It introduces a new
match module to iptables and allows you to catch the following P2P Networks
at
the moment:
-Fast Track (KaZaA and clones)
-Gnutella
-Edonkey (Edonkey, Emule, Overnet ...)
-Direct Connect
You can download it from:
http://ilabws13.informatik.uni-leipzig.de/~mai97bwf/ipp2p.tar.gz
To drop Kazaa data packets you just have to use the following
iptables-command:
iptables -A FORWARD -tcp -m ipp2p --kazaa -j DROP
This tool works pretty well as we tested it in a university environment.
Have a look and feel free to come back with any comments or suggestions to
me or
the author.
Regards,
Mike
--
COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
--------------------------------------------------
1. GMX TopMail - Platz 1 und Testsieger!
2. GMX ProMail - Platz 2 und Preis-Qualitätssieger!
3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-Post
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply [flat|nested] 8+ messages in thread