RE: pb with P2P...

[Chris Santerre <csanterre () MerchantsOverseas com>]

> -----Original Message-----
> From: dessrezo [mailto:dessrezo () noos fr]
> Sent: Wednesday, April 09, 2003 3:44 AM
> To: Security-Basics@Securityfocus. Com
> Subject: pb with P2P...
>
>
> Hi everyone,
> I have to avoid users using P2P softs like Kazaa on a 
> network. I wanted
> to close ports like 1214 but I red that theses softs can also use
> dynamic ports. One solution could be to close every port that are not
> used by "legal" application but for example, ftp is legal and use
> dynamic port too for data... 
> Does anyone have a solution?? (Software or anything else)
> Thanks in advance!!

The default rule is to deny everything an specify exactly what you want to
go out and in. Never the other way around. I block P2P because I block
everything :) 

The other is to monitor and fire them.

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------