Networks

Ask something
Question Locked

P2P Firewall Rules - Protocolls?

0 helpful
10 replies

by maxpowers410

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hey, am configuring a firewall in school need to be done in about 2 hours. We need to block all P2P programms, any idea what protokolls or what ports I need to block to stop them? P2P uses diff protocolls I thought... and random ports...

10 replies

by older mycroft

Block everything, then allow internet access as it is requested.

That way, each access is logged as having been approved and if it's not approved, you know it's not happening.

by maxpowers410

No, the thing is we have to create a rule that allows everything from the lan into the dmz and wan, apart from p2p and ftp.
We are using m0n0wall... We blocked ftp but im not sure if there is a standard protocol for p2p. We have to block everything going IN from the wan, apart from web access (is https included in http protocoll?)`
So we have 3 Network cards, the one heading wan has everthing coming in blocked apart from :80...

by maxpowers410

I guess its irrelevant, its only a test. But were not restricting diff. applications on the clients, so I guess the test clients can have anything installed on them. Although in a proffessional situation you would probably have local guidlines to stop installing torrent progs....

by rob miners

as most of my recent work is removing viruses because of P2P software.

Edit to add: Welcome to TechRepublic.

Rob

by maxpowers410

It usualy is for the end user! Maybe you should just put in a kick ass firewall?

by rob miners

most of my clients bring the Systems to me as a last resort to get the System functioning again. Then they get a lecture and guidence on P2P software. They are a bit more careful as they know what to look for next time. But the safest way is to keep it off your network.

by maxpowers410

ah yeah, buts its grand as long as your not stupid, just tell them to watch out for file sizes and watch out for anything executable... maybe you could make a pdf with the basics of p2p safety? Might save a lot of hassle (but potentially get rid of customers...)

This discussion is closed to new replies.