From owner-freebsd-isp Mon Jun 26 11:58:43 2000 Delivered-To: freebsd-isp@freebsd.org Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66]) by hub.freebsd.org (Postfix) with ESMTP id 17A1A37B6CB for ; Mon, 26 Jun 2000 11:58:40 -0700 (PDT) (envelope-from nate@yogotech.com) Received: from nomad.yogotech.com (nomad.yogotech.com [206.127.123.131]) by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id MAA11353; Mon, 26 Jun 2000 12:58:28 -0600 (MDT) (envelope-from nate@nomad.yogotech.com) Received: (from nate@localhost) by nomad.yogotech.com (8.8.8/8.8.8) id MAA19694; Mon, 26 Jun 2000 12:58:27 -0600 (MDT) (envelope-from nate) Date: Mon, 26 Jun 2000 12:58:27 -0600 (MDT) Message-Id: <200006261858.MAA19694@nomad.yogotech.com> From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: Chris Cook Cc: Max Clark , freebsd-isp@FreeBSD.ORG Subject: Re: blocking napster In-Reply-To: <3957487D.59532AC5@tcworks.net> References: <00c401bfdf90$67580690$950110ac@emindnfzmj9j9m> <3957487D.59532AC5@tcworks.net> X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid Reply-To: nate@yogotech.com (Nate Williams) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > Can anyone tell me what ports napster is using so I can block access on my > > router. 6Kbps on a full T1 is crazy. > > > > The only way to effectively do this is to block all ports and enable > only the ones you need. Napster will jump to another port if the > default is blocked. According to some FAQ I read on the WWW, the most effective way to block Napster is to block access to the Napster servers. /sbin/ipfw add deny tcp from any to 208.178.163.56/29 via ${netif} /sbin/ipfw add deny tcp from any to 208.178.175.128/29 via ${netif} /sbin/ipfw add deny tcp from any to 208.49.239.240/28 via ${netif} /sbin/ipfw add deny tcp from any to 208.49.228.0/24 via ${netif} /sbin/ipfw add deny tcp from any to 208.184.216.0/24 via ${netif} Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message