How can i use iptable to block bittorent ?

How can i use iptable to block bittorent ?
==============================

Hi, Everyone
Now i need to block my network to se bittorent.
and i use iptable to be software firewall.
I want to know how to block bittorent with iptable command .

Thank you very much
Pratchaya

On 2006-05-24, Pratchaya <(E-Mail Removed)> wrote:
> How can i use iptable to block bittorent ?

By blocking the correct ranges of ports (6881-6999). You can look at
iptables documentation to see the correct command line to do so, or just
look at any example available in the net.

Davide


--
Anyone who says he can see through women is missing a lot.
-- Julius Henry "Groucho" Marx (http://en.wikiquote.org/wiki/Groucho_Marx)

"Pratchaya" <(E-Mail Removed)> writes:

>How can i use iptable to block bittorent ?
>==============================

>Hi, Everyone
>Now i need to block my network to se bittorent.
>and i use iptable to be software firewall.
>I want to know how to block bittorent with iptable command .

Why do you need to block your network to "se" bittorent ( whatever that is)
What you would block are the ports bittorrent uses but of course I do not
happen to remember the port numbers. However, if you are worried about
nepharious users, they could always change the ports. No firewall looks
inside the packets to see what is really in them, since that would slow
down network traffic to a crawl. It relies on port numbers.
Note that doing this would mean that your users could neither download or
upload say the Mandriva distribution.




>Thank you very much
>Pratchaya

On 24 May 2006 04:05:52 -0700, "Pratchaya" <(E-Mail Removed)>
wrote:

>How can i use iptable to block bittorent ?
>==============================
>
>Hi, Everyone
>Now i need to block my network to se bittorent.
>and i use iptable to be software firewall.
>I want to know how to block bittorent with iptable command .
>
>Thank you very much
>Pratchaya

Look into Layer7 and IPP2P

You will find some info at netfilter.org and some more on the LARTC
mailing list, as well as the sites dedicated to Layer7 and IPP2P.

It is NOT as easy as closing ports.
--
buck

Unruh <unruh-(E-Mail Removed)> wrote in
news:e523k7$eup$(E-Mail Removed):

> "Pratchaya" <(E-Mail Removed)> writes:
>
>>How can i use iptable to block bittorent ?
>>==============================
>
>>Hi, Everyone
>>Now i need to block my network to se bittorent.
>>and i use iptable to be software firewall.
>>I want to know how to block bittorent with iptable command .
>
> Why do you need to block your network to "se" bittorent ( whatever that
> is) What you would block are the ports bittorrent uses but of course I
> do not happen to remember the port numbers. However, if you are worried
> about nepharious users, they could always change the ports. No firewall
> looks inside the packets to see what is really in them, since that would
> slow down network traffic to a crawl.

Actually many firewall offerings have add ons that do exactly that. The
Checkpoint Firewall 1 offering has a limited form of content filtering and
there are add ons available that extend that capability. Specific firewall
hardware devices such as Cisco PIX's also offer content filtering
including on the fly virus scanning. There are similar add ons available
for Netfilter. It isn't really an issue as there is hardware that is
plenty fast enough to do it.

Klazmon.




> It relies on port numbers.
> Note that doing this would mean that your users could neither download
> or upload say the Mandriva distribution.
>
>
>
>
>>Thank you very much
>>Pratchaya
>
>