Solved

File Sharing and P2P Ports

Posted on 2003-11-14
4
751 Views
Last Modified: 2013-11-21
Does anyone have a list of them? I would like to block them. Thanks
0
Comment
Question by:drgh0st
4 Comments
 
LVL 6

Expert Comment

by:rj-smith
ID: 9749345
No list, but I think each P2P network uses a different port.

The ones I do know are as follows:

GNUtella - 6346 to 6348
KaZaA - 1214

If your firewall's capable, it might be a better idea to log all traffic for a while to see what's used and then block everything else. After that, analyse your list and see what else can be discarded.

Hope that helps.
0
 
LVL 18

Accepted Solution

by:
chicagoan earned 25 total points
ID: 9749497
It's a slippery slope!

If you have cisco gear, take a look at NBAR

otherwise you'll have to work you way through each service:

example: kaaza - reverse ip lookup gives you kaaza's addresses: Start with blocking 212.100.253.45 212.100.253.44 and find the common commonlly used port(s):  http://www.seifried.org/security/ports/1000/1214.html

here's a commonly used list:
 412
1214
4661
 4662
4663
 4664
 4665
 6346
 6347
 6881
 6882
6883
 6884
 6885
6886

.. easily be defeated by people switching to non-default ports or UDP based protocols, some like WINMX don't need the ports open on both sides, some hide as http...

The first thing to do is WRITE A POLICY! advertise your policy, watch your bandwidth hogs, scan for Mp3's and P2P software on machines, do port scans for rogue servers... and hammer a couple of people - get HR to get them on the carpet - the word will get out.

There are a lot of products coming on line to combat the legal implications and bandwidth drain like
http://www.lowth.com/p2pwall/ftwall/

and scores of others, but watching traffic and communicating with employees is very effective
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question