Anyway to block Kazaa with a firewall?

[tjdavis1138]

We have a d-link router at work with a built-in firewall. I know I can block certain programs and websites with this, but I've never done it before and don't really know where to start.
We seem to have a slight kazaa and yahoo problem.

Any help would be greatly appreciated.

 

[tjdavis1138]

 

[videobruce]

We seem to have a slight kazaa and yahoo problem

Would you like to let us in on it so we might be able to help you?

 

[EagleKeeper]

1) Get rid of Kazza on the work systems - why should it be needed?

 

[videobruce]

He didn't say it was at work.

 

[EagleKeeper]

Originally posted by: tjdavis1138
We have a d-link router at work with a built-in firewall. I know I can block certain programs and websites with this, but I've never done it before and don't really know where to start.
We seem to have a slight kazaa and yahoo problem.

Any help would be greatly appreciated.

Originally posted by: videobruc
He didn't say it was at work.

See the word that I bolded in his original statement. Implication ?

 

[rudder]

Not familiar with the dlink router, but just leave port 80 (http traffic) open and close the rest. If you have an email server you will also need to leave port 25 open, and port 23 for ftp, etc. But basically close all the ports except what is needed.

If its a big problem for your office and dlink can't do that for you, spend a little more money on a better router or you will have to go to each workstation and delete kazaa.

If your are the office admin, I would work up a computer use policy and make everyone sign it. For example say use of p2p programs is prohibited and you will get fired. That will scare most people, then just block the rest.

 

[tjdavis1138]

I figured I could just block the ports that Kazaa uses and then I wouldn't have to run around all the time and see if anybody is using something that they shouldn't be. We also have some people that like to use their yahoo messenger accounts and hang out in the chat rooms.

We try to be pretty cool at work about internet usage. Everyone gets on occasionally and surfs, but when they start using p2p programs that hog what little bandwidth we have that's where I have to draw the line.

Thanks for the suggestions.

 

[topaz22]

Well, ym can tunnel through http, so you'd have to block the ym login server(s) ip (s) as well.

 

[Jeff7]

People are running P2P programs at WORK? I'd get a packet sniffer or something like that, find who's doing it, and give them one warning to remove it, then either completely cut off their network capability, or get rid of them.
Problem with some of these P2P programs is that the ports they use can be changed in the configuration. If they find that a port is blocked, they'll just use another one.
As someone said, block all ports except the ones needed (I think that Dlink routers can handle that). Keep ports 25 (SMTP), 53 (DNS), 80 (HTTP), and 110 (POP3) open. I think that's all you should need, though there might be others; I think HTTPS uses a different port - 443 if the webpage I'm reading is correct.

 

[aircooled]

Kazaa uses port 1214.

We block all unnecessary ports at work.