Re: Limewire 4.14

[Alex Everett <alex.everett () UNC EDU>]

Michael:

I would test dropping the traffic.
I say this because there were cases where we thought we were rate shaping
because connections were showing up in the table - however not all
appropriate connections were rate limited. There are nuances between
different client side applications for the P2P apps such as bittorrent.exe
and utorrent.exe. This causes different network traffic patterns.
Some of these P2P apps are very ingenious at establishing connections to
peers.
If you can block it successfully, you should be able to rate limit it.
It seems that the file transfers are over TCP and some support TLS.
Let us know how it works, I am sure others are interested too.

-Alex

-----Original Message-----
From: Michael Lymbery [mailto:mlymbery () SCU EDU AU]
Sent: Wednesday, October 03, 2007 7:30 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Limewire 4.14

We are currently trialling a Packetlogic from Netintact and I just tried
Limewire 4.14 through it.  It was correctly classified as Gnutella so now I
can block or shape it.

Alex Everett wrote:
> We use an intrusion prevention system to enforce this.
> We have been working with TippingPoint on this particular application.
> Feel free to email me directly for greater detail.
>
> -Alex Everett, CISSP
> ITS Security Engineer
> University of North Carolina
>
> -----Original Message-----
> From: jkaftan [mailto:jkaftan () UTICA EDU]
> Sent: Wednesday, October 03, 2007 10:05 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Limewire 4.14
>
> Has anyone found a way to block the latest version of Limewire?  Our
> Firewall has an option to block Gnutella networks which used to do the
> trick.  However not with version 4.14.

--
Michael Lymbery
Network Engineer

Information Technology and Telecommunication Services Southern Cross
University PO Box 157 Lismore NSW 2480

Ph:  61 2 6620 3549
Fax: 61 2 6620 3033
Email: mlymbery () scu edu au
http://www.scu.edu.au

Attachment: smime.p7s
Description: