Re: Blocking Music Sharing.

["Dimitri Limanovski" <dlimanov () sct com>]

Just block ALL the traffic outbound and allow only necessary ports,
like HTTP/S, FTP, SMTP, DNS etc. Requires more work on your end
managing the firewall rules but a better practice and protection in
the long run.


Dimitri



|---------+-------------------------------------->
|         |           "Johnson, Mark"            |
|         |           <mjohnson () nmcr com>        |
|         |           Sent by:                   |
|         |           full-disclosure-admin@lists|
|         |           .netsys.com                |
|         |                                      |
|         |                                      |
|         |           09/15/2003 12:37 PM        |
|         |                                      |
|---------+-------------------------------------->
  >--------------------------------------------------------------------------------------------------------------|
  |                                                                                                              |
  |       To:       <full-disclosure () lists netsys com>                                                           |
  |       cc:                                                                                                    |
  |       Subject:  [Full-disclosure] Blocking Music Sharing.                                                    |
  >--------------------------------------------------------------------------------------------------------------|



Due to the legal issues, I am trying to block access to sites like
Kazaa and Limewire in the office.  If I am not mistaken, these
networks can use different ports each time, so there is no way to
block it at the firewall.  Is this right?  And if so, what is the best
way to block access to these types of sites?

Many thanks,
Mark J.




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html