[Fwd: Re: Firewall and Proxy]
> On Wed, 2003-08-06 at 17:10, Mehmet AK wrote:
> > Hi
> > I am using Linux Server in my Company. Personel usally using kazaa ,
> > imesh and downloading mp3 files on the web. That so our internet is
> > down.
> > i want configure firewals against these programs and downloading. Can
> > you help me
> Don't have much experience with that, but if I am not mistaken its going
> to be hard to do without installing a proxy and then allowing internet
> connection only through the proxy. You can then block all connections
> going out except those originating from the proxy server.
> The fact that you are behind a firewall already blocks some of the
> traffic since they can only connect to servers that are not behind a
> firewall, but these programs don't use a specific port for outgoing
> connections and I don't think a standard firewall can understand these
> I suppose that asking people not to use p2p programs is not a workable
Actually quite stupid of me. You can configure the firewall to block
outgoing traffic based on the target port. Don't know the firewall
command since I am using webmin to configure shorewall, but the target
ports you wan't to block are:
That covers just about all the p2p servers.
I think that should do the job.