Discussion Locked

Internet abuse

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How have blocked out most chat programs at work but how do we find out what ports are used for streaming audio and napster a few users are smart enough not to use port6699
How do we seal this leak, without cutting total access to the web?

7 replies

by erikdr

AFIK, a thorough firewall policy works the other way round:
Filter _everything_ but the ports known to be needed. And even for those, sometimes solely allow certain IP addresses to be accessed both internally and externally. So this seems to point more to a too weak firewall than to a really secure and well thought-out policy in your organisation, sorry...

/ The Netherlands

by dr dij

you can also block about 5 IP addresses that will cutoff napster. we've blocked the IP addresses for doubleclick.com and a few others with the result that we don't get the obnoxious ads that alot of sites display, and that uses up bandwidth. Some ads will still get thru if from in house of the web site. The exact addresses were posted in another tech question. the monitoring software approach does not need the address, just the name, which is resolved to the address.

This discussion is closed to new replies.