From mboxrd@z Thu Jan 1 00:00:00 1970 From: LunarFox Subject: RE: block Kazaa download Date: Mon, 03 Jun 2002 23:41:47 -0400 Sender: netfilter-admin@lists.samba.org Message-ID: <000301c20b79$c12c00b0$0200a8c0@JEFF> References: Mime-Version: 1.0 Content-Transfer-Encoding: 7BIT Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: 'netfilter' > -----Original Message----- > From: netfilter-admin@lists.samba.org > [mailto:netfilter-admin@lists.samba.org] On Behalf Of Allan Parreno > Sent: Tuesday, June 04, 2002 11:08 AM > To: netfilter > Subject: block Kazaa download > > anybody has a sample how to block Kazaa download? KaZaA appears to listen on port 1214. So if you block that port *inbound* to your machine, in theory no one should be able to download FROM you. Of course, you can also just tell the program not to share files. If you block *outbound* connections to 1214, your users should be not able to download from anyone ELSE. At least, that's my limited understanding of it, I could be completely wrong. ;) Shouldn't hurt to try one of these rules, depending on which way you're trying to block: $IPT -A INPUT -p tcp --dport 1214 -j DROP # Avoid people downloading from you, and/or $IPT -A OUTPUT -p tcp --dport 1214 -j DROP # Block your users from downloading via KaZaA I use the first rule above, because I was sick and tired of seeing logged packets being dropped when I wasn't even running the client. The usual caveat: people are often able to get around fixed port assignments and your blocking of same. I don't know if the main KaZaA client can do this, but I suspect it wouldn't be too hard to hack it (consider what's been done with KaZaA Lite). HTH, Jeff Bonner