kill net radio formy LAN

How can I block net rardiostations in my LAN network.
I use Linux Slackware 10 as getway , my internet connection is not so big
and my boss told me:
"Kill this net station" . I checked ewerywere without reslut. I can block
p2p programs ,
some "bad" pages ports and IP addres , but I can't block radio
This kind of servises use diferent port , if I block one port - in new
connection port will be change....

If someone know how to do this - pleas help me .

-----------
Tomi

"Tomi" <(E-Mail Removed)> wrote in message
news:d06hm5$oom$(E-Mail Removed)

> How can I block net rardiostations in my LAN network.
> I use Linux Slackware 10 as getway , my internet connection is not so
> big and my boss told me:
> "Kill this net station" . I checked ewerywere without reslut. I
> can block p2p programs ,
> some "bad" pages ports and IP addres , but I can't block radio
> This kind of servises use diferent port , if I block one port - in
> new connection port will be change....
>
> If someone know how to do this - pleas help me .

Use ethereal or iftop to see who's using such a program. Provide them with
written notice to cease, otherwise Internet access will be blocked from
their machine. Then use iptables to do so when needed.

--
use hotmail for email replies

On Thu, 03 Mar 2005 11:30:17 -0800, ynotssor wrote:

> "Tomi" <(E-Mail Removed)> wrote in message
> news:d06hm5$oom$(E-Mail Removed)
>
>> How can I block net rardiostations in my LAN network.
>> I use Linux Slackware 10 as getway , my internet connection is not so
>> big and my boss told me:
>> "Kill this net station" . I checked ewerywere without reslut. I
>> can block p2p programs ,
>> some "bad" pages ports and IP addres , but I can't block radio
>> This kind of servises use diferent port , if I block one port - in
>> new connection port will be change....
>>
>> If someone know how to do this - pleas help me .
>
> Use ethereal or iftop to see who's using such a program. Provide them with
> written notice to cease, otherwise Internet access will be blocked from
> their machine. Then use iptables to do so when needed.

It sounds like Tomi has an ingress firewall in place, but is no egress
firewall.

Tomi, setup an egress firewall to only allow specific services
to the Internet (i.e., WWW). This won't block all Internet stations, but
it will help significantly.

Then, the next time your boss asks you to block a station, just run a tool
like iptraf to watch streams of traffic. Then, block the IP of the
offending station.

Also, this will eventually become a management issue. You can't block
every station on the Internet and the users will keep finding them. The
issues and consequences need to be addressed to all employees. Then, the
next time your boss hears a station being played, that user can get a
warning, etc.

Mark