Security

Ask something
Discussion Locked

Which firewall ports do I leave open?

0 helpful
1 reply

by stuart.hepburn

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have set up a small network which users connect to wirelessly using their own machines. I have content filtering, but this is not stopping illegal P2P downloads.

I don't want to spoil anyone's fun but I cannot let this continue. Can I restrict port access at the firewall level on the router? If so which ones e.g. port 80 open for HTTP traffic etc?

Any help apprciated.

1 reply

by bfilmfan

Common ports and the rules to block them are:

# kazaa - fasttrack clones
add deny tcp from any to any 1214
add deny udp from any to any 1214

# edonkey and clones
add deny tcp from any to any 4661-4672
add deny udp from any to any 4661-4672

# winmx and napster
add deny tcp from any to any 6257
add deny udp from any to any 6257
add deny tcp from any to any 6699
add deny udp from any to any 6699

# bittorrent
add deny tcp from any to any 6881-6889
add deny udp from any to any 6881-6889

# gnutella
add deny tcp from any to any 6346
add deny udp from any to any 6346

#edonkey
add deny tcp from any to any 4661-4672
add deny udp from any to any 4661-4672
add deny tcp from any to any 5555
add deny tcp from any to any 4242
add deny tcp from any to any 3306
add deny tcp from any to any 2323
add deny tcp from any to any 6667
add deny tcp from any to any 7778

Unfortunately, the more recent versions of the P2P clients can even masquerade as HTTP traffic on Port 80.

I would recommend that you use bandwidth throttling to accomplish your goals. Akonix Enforcer is a software product that performs an asynchronous (off-line) analysis of all enterprise network traffic at a given point (using a patent-pending application protocol - layer 7 signature match to detect, log and if desired block P2P (and IM if desired) applications from making a connection from your network. They offer a two week free eval of Enforcer.(http://www.akonix.com/products/enforcer.asp)

This discussion is closed to new replies.