[LUGOS-BLA] Re: [LUGOS] Blokiranje Kazaa

Gregor Ibic gregor.ibic at intelicom.si
Sat Dec 7 06:43:55 CET 2002


Kaj ni to dober poligon za možgane?
Videl sem eno rešitev, kjer z iptables (netfilter) gledaš vzorec v TCP
streamu in blokiraš glede na to.

LP,
Gregor

Intelicom d.o.o.
Security software company
http://www.intelicom.si
email: info at intelicom.si
tel.: ++386 5 6309 158
fax.: ++386 5 6279 355

-----Original Message-----
From: lugos-bla-owner at lugos.si [mailto:lugos-bla-owner at lugos.si]On
Behalf Of David Klasinc
Sent: Friday, December 06, 2002 10:59 PM
To: lugos-bla at lugos.si
Subject: [LUGOS-BLA] Re: [LUGOS] Blokiranje Kazaa


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Monday 02 December 2002 09:46, you wrote:

> Ne mislim za hitrost. Odgovor na tisti drugi mail.
>
> ********************************************
> It appears that KaZaa 2.0 port hops. Blocking 1214 or access to the kazaa
> website (or altnetp2p.com or cms1.net) does not have any effect.
>
> Looking at packet traces, when KaZaa 2.0 starts up, it sends several UDP
> requests from source port 2848. Blocking this port only slows the
> connection since the app moves to sending out TCP requests on various
ports
> (eg, 2261 1214 1337 3681 1448 2875 1173 3992 1502) Even blocking all these
> ports does not prevent a connection.

Tak software bi morali prepovedat... ;>


- --
David!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE98R2Pz0dAgYeWS2wRAnY0AJ4pBimIwLuSlayXjlrUAptVEEIPSACfeKeG
W60pbZqSdSJtckYCXN64gV0=
=dAyT
-----END PGP SIGNATURE-----




More information about the lugos-bla mailing list