Re: Problema Kazaa e protocolli peer to peer

Io utilizzavo queste acl...

!********************************************* File Sharing Prg
! eDonkey
!access-list inside deny tcp any any range 4661 4662
!access-list inside deny udp any any eq 4665
!
! IMesh
!access-list inside deny ip any 216.35.208.0 255.255.255.0
!
! Kazaa
!access-list inside deny ip any 213.248.112.0 255.255.255.0
!access-list inside deny tcp any any eq 1214
!
! Audiogalaxy
!access-list inside deny ip any 64.245.58.0 255.255.255.0
!
! Gnutella
!access-list inside deny tcp any any range 6346 6347
!access-list inside deny udp any any range 6346 6347
!access-list inside deny tcp any any range 6346 6349
!access-list inside deny udp any any range 6346 6347
!
! WinMX
!access-list inside deny ip any 209.61.186.0 255.255.255.0
!access-list inside deny ip any 64.49.201.0 255.255.255.0
!access-list inside deny tcp any any eq 6699
!access-list inside deny udp any any eq 6257
!
! Napigator
!access-list inside deny ip any 209.25.178.0 255.255.255.0
!
! Morpheus
!access-list inside deny ip any 206.142.53.0 255.255.255.0
!
!********************************************* File Sharing Prg


----- Original Message ----- 
From: "marco misitano" <marco@misitano.com>
To: <ml@sikurezza.org>
Sent: Wednesday, January 22, 2003 9:04 PM
Subject: RE: Problema Kazaa e protocolli peer to peer


Non ho bene a mente se kazaa si basa sulla risoluzione in IP di un FQDN,
in questo caso un'altra cosa che puoi fare, abbastanza efficace e' il
DNS poisoning locale. In pratica dici al tuo DNS server che
server.kazaa.com risolve a 127.0.0.1 , in questomodo chi vuole
connettersi al server, se usa il tuo DNS server interno nonpotra' farlo.

Un'altra cosa che puoi fare e' mettere una route sul router che punta
chi cerca di collegarsi a kazaa ad un buco nero.

Ciao

~marco





-
-- UniVR
-- Mail (attachments included) checked by the antivirus agent

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List