Snort mailing list archives

Re: Is anyone using 'react' to block the use of Gnutella?


From: "hackerwacker" <hackerwacker () cybermesa com>
Date: Mon, 23 Sep 2002 14:22:10 -0600

NOT advised. Unless you want a packet storm.
----- Original Message -----
From: "Vieth, Scott" <svieth () mail mcw edu>
To: <snort-users () lists sourceforge net>
Sent: Monday, September 23, 2002 1:38 PM
Subject: [Snort-users] Is anyone using 'react' to block the use of Gnutella?


Hi:

Snort is telling me that we have folks using Gnutella to send/receive
files
from other Gnutella users on the Internet.  I've blocked all the 'easy'
TCP
ports on the firewall to stop P2P file sharing.  But the P2P protocols are
still getting through. I think they are getting more "firewall-smart".

Since Snort can 'see' the folks who are running Gnutella, could I use
'react' to block/disrupt/close those connections?

Just wondering....

Thanks,

-Scott Vieth
Medical College of Wisconsin



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: