Blocking all P2P network in the firewall [corporate users]

Q: Hi,

Our business users suddenly rediscovered P2P network (Morpheus mainly) and I would like all those annoying little things stop right out the box. Dont you know where I can find a complete overview of the port to block in our Pix? 0.

Thanks-guy


Best Answer: Many of these sites are being shut down from being used by your INTERNET PROVIDER, because of the amount of viruses etc. The net is using Spam blockers, virus protectors, etc. for the safety of their users. Livewire is KNOWN to have viruses, and most of these sites are illegally sharing copyrighted material.

Building Corporations with Credit and Private Investor Funds
Re:Originally posted by: guy
strange – first rule of a firewall is block all, then you add needed ports and addresses. Guess your boss is clueless. :)

If some of those are using port 80 then that blows. I'm seeing more and more non HTTP apps use port 80. downright dispicible.

Let us know what rules you've put in place and what P2P apps they've blocked when you get done testing.

Also, where did you find the port information? Maybe there are some logon servers these apps talk to and you could block those addresses as well (any port number) to keep them from registering. This is how we eliminated instant messengers like AIM, MS, Yahoo, ICQ.

teehee almost exactly what I was going to say, except not calling the boss clueless (insulting people makes you look like a huge ass not you personally but in general.) Instead of trying to battle users by blocking ports as they abuse them, block them before they can be abused. if your at work, most likely you only need the web, and E-mail, if you have your network layered logicly you can block the apropriate ports at the border and still freely use programs that need to be used in building between computers without a problem, if you need to open ports as needed. as to non HTTP apps using port 80, one solution (don't know if it even exists but am throwing it out there anyway) is to filter traffic to verify what is comming in and out of a port is what is SUPPOSED to be comming in and out of that port, basicly verifying ex. HTTP data is infact HTTP data.


Springer – The Essential User’s Guide
Re:Yeah, that damn Weatherbug crap uses port 80. Had to block like 4 weatherbug domain names to rid myself of it. Pain in the arse.
Block port 80 on your boses computer, see what happens :-)

Mine doesnt know the difference between port 80, port 21 or a port-a-pottie for that matter :-)


Easy Corporate Money Program
Re:strange – first rule of a firewall is block all, then you add needed ports and addresses. Guess your boss is clueless. :)

If some of those are using port 80 then that blows. I'm seeing more and more non HTTP apps use port 80. downright dispicible.

Let us know what rules you've put in place and what P2P apps they've blocked when you get done testing.

Also, where did you find the port information? Maybe there are some logon servers these apps talk to and you could block those addresses as well (any port number) to keep them from registering. This is how we eliminated instant messengers like AIM, MS, Yahoo, ICQ.


Get More Corporate Gigs
Re:Gnotella at 23 and 80? Um, be real careful blocking those or you will have some mighty unhappy users :-)

A special offer for Sbi! users!
Re:Well, here's a common listing for those of you that might be interested. Although i still think the best way to hardeing a firewall is to block all outbound connection and just open the required ports, but my boss does not think like that…

AIMSTER – PORT 5025

AUDIOGALAXY – PORT 9000

BEARSHARE, XOLOX, LIMEWIRE & MOST GNUTELLA CLIENTS – PORTS 6345, 6346, 6347, 6348, 6349

WINMX/OLD NAPSTER – PORT 6699

NEW NAPSTER – PORTS 8875, 8876, 8888

KAZAA/MORPHEUS – PORT 1214

EDONKEY2000 – PORTS 4661, 4662, 4665

GNOTELLA – PORTS 23, 80, 6667, 8080


Related posts

Leave a comment

0 Comments.

Leave a Reply


click to changeSecurity Code

[ Ctrl + Enter ]