[unisog] Blocking Kazaa

Arnold, Jamie harnold at binghamton.edu
Wed Apr 9 00:26:53 GMT 2003


We have seen a large increase in tunneled http for Kazaa and other P2P
programs.  Using a tunnel allows the traffic to bypass packet shapers and
most IDS units.  The next step is when they introduce encrypted
P2P...that'll make things interesting..... 


-----Original Message-----
From: Marcos Guerra [mailto:Marcos.Guerra at br.flextronics.com] 
Sent: Tuesday, April 08, 2003 4:47 PM
To: unisog at sans.org

Hi all,
 
I would like to know how to block the Kazaa program through my firewall.
As far I know, it uses port 80 and I cannot block this port, I try to block
port tcp 1214 and didn't work, cause it will use port 80 to connect and
downloads.
 
If anyone could help me, I'll be very thankfull.
 
Thanks a lot;
 
Marcos Guerra



More information about the unisog mailing list