From mboxrd@z Thu Jan  1 00:00:00 1970
From: Raymond Leach <raymondl@knowledgefactory.co.za>
Subject: Re: block kazaa
Date: 26 Mar 2003 07:30:19 +0200
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <1048656618.6605.13.camel@raylinux.internal>
References: <5.2.0.9.0.20030325212147.00ba2e88@mail.clara.net>
Reply-To: raymondl@knowledgefactory.co.za
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-bKSZFQFkz/P/VZunKc46"
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <5.2.0.9.0.20030325212147.00ba2e88@mail.clara.net>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
To: Netfilter Mailing List <netfilter@lists.netfilter.org>


--=-bKSZFQFkz/P/VZunKc46
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2003-03-25 at 23:27, paulc@ibiblio.org wrote:
> The way I block Kazaa (and the other file sharing applications) is a=20
> blanket ban on all ports by default. I then open the ports as I think is=20
> appropriate at the firewall. These only include the port 23 for anyone=20
> wishing to use telnet. All web and ftp style ports on 80, 21 and the like=
=20
> are handled by a web-proxy to prevent using them for other purposes. All=20
> incoming connects (and lots of ICMP messages) are dropped by the firewall=
 also.
>=20
How do you get passive ftp to work and not allow file sharing networks?

>=20
--=20
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
(  http://www.mapnet.co.za/            )
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=3D(___/          \___)=3D(___/


--=-bKSZFQFkz/P/VZunKc46
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA+gTrqh1fuR/Bv+ygRAm2VAKCCTlY4d7zxvhvuIzOa1Bx1Q0/e1ACgimOx
kMXivnbkIFJMB0nUXnWEvec=
=/RS3
-----END PGP SIGNATURE-----

--=-bKSZFQFkz/P/VZunKc46--