Re: [squid-users] Denying p2p connections

From: Siew Wing Loon <wlsiew@dont-contact.us>
Date: Fri, 28 Mar 2003 01:54:12 -0800 (PST)

Hi Ismael,

Here is what I do...

Drop the default FORWARD policy and enable necessary
ports to be forwarded.

Regards,
Siew

--- Ismael Silveira <milach@uol.com.br> wrote:
> Hey guys,
>
> I'd like to deny access to P2P connections here in
> my network, I know the
> hosts are using the 1214, 4662 and 4672 ports w/
> Kazaa, so I thought this
> could work
>
> iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport
> 4662 -j DROP
> iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport
> 1214 -j DROP
> iptables -A FORWARD -s 0/0 -d 0/0 -p tcp --dport
> 4672 -j DROP
> (i'm not sure though)
>
> However I know that the user can work around those
> restrictions by setting
> different ports on their client...
>
> So I'd really appreciate if you guys could share
> some rules you made to deny
> P2P connections out there.
>
> Thanks in advance,
> Ismael
> Pelotas, Brazil
>
>

__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com
Received on Fri Mar 28 2003 - 02:54:15 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:24 MST