Re: {Klaxon Group} Digest for spookary@googlegroups.com - 1 Message in 1 Topic

9 views
Skip to first unread message

Aung Khine Sint

unread,
Dec 1, 2011, 2:39:08 AM12/1/11
to spoo...@googlegroups.com
Hi steve
I want to advice some info for you. Firstly why your friend want to block p2p file sharing. I think he want to control the internet bandwidth usage for user.
Blocking p2p file sharing on router is not easy for normal user, I guess. The way to block p2p file sharing is using firewall,URL blocking and Qos (if router support,butQos do not block p2p, it only make p2p to become low priority other than voice or other data packets).
In the case of using firewall, you could use default firewall from the router or you could make firmware upgrade to make more control like tomato firmware and it's more good and more control but only recommend for experienced user.So it's a good
option to use default firewall for normal user. The application protocol that should block in firewall are ADC, BitTorrent, ED2K, Gnutella, rsync, MLDonkey, Ares, Direct Connect, FastTrack, eDonkey, MANOLITO/MP2PN, OpenNAP, 100Bao, Aimster, Applejuice,Freenet,GnucleusLAN,GoBoogy,KuGoo,OpenFT,MUTE,Soribada,Soulseek.Xunlei, because p2p file sharing work on application layer of OSI seven layer model. And you should block ftp (tcp port 20,21) but it's different from p2p model. And when you block the port, you should block all port, port range0-65535 except the port you will need such as http 80,https 443 (for web),pop3 110,smtp 25,imap 143 (for server base mail).But there is one thing to aware is that p2p can travel over http and pop3/smtp Check this link http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers for more detail.
Another way for p2p blocking is URL blocking, but it's not so efficient but it's more easy, I guess. Search the p2p file sharing website in google and list them and insert it to the URL block list of his router. When inserting the URL address of website, it's more good to insert the IP address of that website, because anybody who knows the IP address of that website can bypass if you were block only with URL). To see the ip address of a website, go to the command prompt and ping the website,
eg ping www.google.com, and you will get the ip address of google from reply message.
And the last is using Qos if router support, enable the Qos and move the p2p sharing to the down for making low priority.


I hope my late reply would help your friend

YeKyawSoe

unread,
Dec 1, 2011, 8:11:33 PM12/1/11
to spoo...@googlegroups.com
That's very good friend.
P2p file sharing is difficult to block for dedicated users.

My advise is simple but effective. First do reconnaissance, observe ur roommate or the one that u want to make as target.
Collect info from him, what kind of user he is. Talk to him if in case.
Then., u will know what kind of user he is.
If the user is novice, you're ready to start with application based blocking mechanism in ur router. If its not supported, try block uTorrent default port number. Qos mechanism is very good but it'll affect everyone including yourself. 
The point is if user is novice, use above easy methods, also u can reference from masint.
You can't block by ports becoz uTorrent will use the port number which is our daily use like 80 so not really effective.
Anyway, my advise is try with ur own pace.
First try to block urself successfully before trying to blocking others.

Cheers
Mic


On Dec 2, 2011, at 4:50, spoo...@googlegroups.com wrote:

    You received this message because you are subscribed to the Google Group spookary.
    You can post via email.
    To unsubscribe from this group, send an empty message.
    For more options, visit this group.

    --
    You received this message because you are subscribed to the Google
    Groups "Klaxon Group" group.
     
    For more information, visit this group at
    http://home.klaxongroup.com/discussion

    Steven Soe

    unread,
    Dec 3, 2011, 5:59:00 AM12/3/11
    to spoo...@googlegroups.com
    thx for the prompt reply.. a lot info inside and a lot of work to be done. 

    beside that, ur reply indicates how you've researched on this topic. great work. and i will let my friend know it.

    thx.

    Steven Soe

    unread,
    Dec 3, 2011, 6:02:32 AM12/3/11
    to spoo...@googlegroups.com
    to michael, 

    yep, u r right QoS effect everybody, so i didn't recommend as well. and blocking by port is not effective too, cos torrent software can use different port randomly, without even the user is knowing.

    anyway, i think i may not talk to him now. because i am going to get movies that he download :) :) :)

    and in this way, i can save my computer's HD as well, plus the time of looking for movies. 

    wahahaaaaa.. 

    Michael

    unread,
    Dec 3, 2011, 6:06:58 AM12/3/11
    to Klaxon Group
    To Steven,

    Aiyaaa....
    you have researched your opponent and take advantage from him. :)

    Reply all
    Reply to author
    Forward
    0 new messages