RE: [fw-wiz] Blocking Kazaa

From: peter robinson (peter_at_www.securegateway.org)
Date: 06/27/03

  • Next message: Daniel Howe: "RE: [fw-wiz] Blocking Kazaa"
    To: <jbaumgardner@primarycarenet.org>
    Date: Fri, 27 Jun 2003 23:22:56 +1000 (EST)
    
    

    James

    Have a look at the inline snort stuff. It uses IPTables and snort to do
    intrusion prevention but snort has signatures to block Kazaa (and the
    like) with great effect, Best part is it's free

    Peter Robinson
    Securegateway.org

    > I can't seem to find anything that isn't commercial (expensive) to help
    > me out with this, so I just have to monitor, slap hand, monitor ...
    > Rinse ... Repeat.
    >
    > I would love to hear if someone has a way to block it with a PIX.
    >
    > -----Original Message-----
    > From: Dante Fressone [mailto:FressoneD@officenet.com]
    > Sent: Wednesday, June 25, 2003 1:21 PM
    > To: firewall-wizards@honor.icsalabs.com
    > Subject: [fw-wiz] Blocking Kazaa
    >
    >
    > Hi, I want to block kazaa from my pix fw blocking port 1214 TCP, but it
    > seems like it's using port 80 now,,,,and I can't drop that port because
    > web wont work.....
    >
    >
    > Any ideas?
    >
    >
    > Thanks!
    >
    >
    > Dante Fressone
    > Networking
    > e-mail: fressoned@officenet.com
    > Tel: 54-(11)-4126-2728
    >
    > _______________________________________________
    > firewall-wizards mailing list firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Daniel Howe: "RE: [fw-wiz] Blocking Kazaa"

    Relevant Pages

    • RE: [fw-wiz] Blocking Kazaa
      ... You could use an IDS such as snort to detect traffic from kazaa or other ... Port 80 is used as a backup port number for kazaa. ... I want to block kazaa from my pix fw blocking port 1214 ...
      (Firewall-Wizards)
    • RE: [fw-wiz] Blocking Kazaa
      ... me out with this, so I just have to monitor, slap hand, monitor ... ... I would love to hear if someone has a way to block it with a PIX. ... Hi, I want to block kazaa from my pix fw blocking port 1214 TCP, but it ...
      (Firewall-Wizards)
    • RE: [fw-wiz] Blocking Kazaa
      ... me out with this, so I just have to monitor, slap hand, monitor ... ... I would love to hear if someone has a way to block it with a PIX. ... Hi, I want to block kazaa from my pix fw blocking port 1214 TCP, but it ...
      (Firewall-Wizards)
    • RE: locking down snort
      ... When setting up snort the best method is ... Also in larger networks the sniffer management port can sit on the ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
      (Security-Basics)
    • RES: snort- problems
      ... snort is monitoring only the ... It is important to gather some other information about your network, ... assign the "monitor port" to snort. ...
      (Focus-IDS)