Re: [FW-1] Kazaa, Overnet, eDonkey, WinMX and other P2P Applications....

[Bill Mathews <billford@FW1-NOSPAMBILLFORD.COM>]

It's not quite that easy (only in a perfect world). Some of these services
are capable of "rolling over" to an open port (mostly port 80) which most
companies can't just block. NG with AI, is capable of finding these
tunneled protocols and stopping them but I've heard conflicting reports on
whether or not it's been effective. There needs to be a better strategy,
especially with the P2P apps as they don't necessarily have to connect to
a server to be effective.

Just my $.02


Bill

> Just find out the ports they use, and block them. If you are running
> NG, you should be able to determine most of them via the Smartview
> Tracker.
>
> Thanks.
>
> Regards
>
> Neil Kemp
> Security Consultant
> Business Sense IT Ltd
>  _____
>
>
> Suite 296, 17 Holywell Hill,
> St Albans, AL1 1DT.
> Å
> +44 (0) 8700 201694
> Ë
> +44 (0) 7958 545129
> Ê
> 07092 153679
> +
> Neil.Kemp@BusinessSense.co.uk
> "
> http://www.businesssense.co.uk
> http://www.secureadvice.co.uk
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM] On Behalf Of Juan
> Andres Galavis
> Sent: 13 August 2003 14:07
> To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] Kazaa, Overnet, eDonkey, WinMX and other P2P
> Applications....
>
> Ok guys, as I just asked a week ago about IM Apps, now I would like to
> know
> how to block P2P applications. Which servers to block, or services or
> any
> other trick.....
>
> Thanks,
> Saludos/Cheers,
>
> Juan Andrés Galavís
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


--
Bill Mathews
Open Source Software Advocate
--
Conflict builds character. Crisis defines it.
-- Steven V. Thulon

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================