<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
I think I'm gonna need to instpect the packets and block them.<br>
<br>
<br>
Mark Musone wrote:<br>
<blockquote type="cite"
cite="mid000301c30993$94b77780$3301a8c0@shatterit.com">
<pre wrap="">Heh...you're gonna be chasing it for a while :^) it port hops
around..you can't just filter out ports :^)
-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:owner-nflug@nflug.org">owner-nflug@nflug.org</a> [<a class="moz-txt-link-freetext" href="mailto:owner-nflug@nflug.org">mailto:owner-nflug@nflug.org</a>] On Behalf Of
Justin Bennett
Sent: Wednesday, April 23, 2003 8:17 AM
To: <a class="moz-txt-link-abbreviated" href="mailto:nflug@nflug.org">nflug@nflug.org</a>
Subject: Re: Kazaa and iptables
I tried blocking 1241 It still works. I see stuff on 1697, I'll try
blocking that. I blocked that now it's on 1699. It seems to keep moving
the ports to an open one.
Justin Bennett wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I'm loading it up now, I'll get out the good old packet sniffer and
see what I can come up with.
Justin Bennett wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I found some info, they say to block 1214, but others say kazaa just
uses a diffrent port if that one is blocked. I don't know enough
about how Kazaa works to know if thats true. If it connects to a
central server or not (like napster) first if so maybe blocking that
can stop it... Let me know what you find I'll keep looking too.
Thanks
Justin
Cyber Source wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I took a quick look into our shorewall config here because I could
</pre>
</blockquote>
</blockquote>
</blockquote>
<pre wrap=""><!---->have
</pre>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">sworn I saw a commented out section for Kazaa in there but I
</pre>
</blockquote>
</blockquote>
</blockquote>
<pre wrap=""><!---->couldn't
</pre>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">find it this morning. I was looking for the port number for you and
even
in a quick search on Google, found no quick location of the port
</pre>
</blockquote>
</blockquote>
</blockquote>
<pre wrap=""><!---->Kazaa
</pre>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">uses. If I find it I will pass it on.
On Wed, 2003-04-23 at 07:31, Justin Bennett wrote:
</pre>
<blockquote type="cite">
<pre wrap="">A buddy of mine asked me to block Kazaa for him on his Frat's dsl
connection, he has a linux fw/router using iptables. I have not
used kazaa anyone have a rule to block it.
Thanks
Justin
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
</blockquote>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Justin Bennett
Network Administrator
RHCE (Redhat Certified Linux Engineer)
Dynabrade, Inc.
8989 Sheridan Dr.
Clarence, NY 14031
</pre>
</body>
</html>