full-disclosure - Blocking Music Sharing.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: jared.bergeron at office.xerox.com (Bergeron, Jared)
Subject: Blocking Music Sharing.

I think the key here is a strong enforceable communicated policy and then identifying the traffic and addressing the user. I would go with an IDS (Snort is a good choice to IDENTIFY as you can easily write the sigs). Now granted Snort could pick it up on different ports depending on what it was looking for, however you need to think about tunneled connections via ssh and ssl. A good client inventory app seems to be the best way to catch these... Ahhh big brother and his tools.

Regards,
---------------------
Jared Bergeron
Systems Analyst / E-Security
XEROX Office Printing Business 

  _____  

From: Jason Bethune [mailto:jbethune@...n.kentville.ns.ca] 
Sent: Monday, September 15, 2003 10:07 AM
To: full-disclosure@...ts.netsys.com

Snort is one tool used by alot of IT guys to block file sharing programs. THe trouble with these programs is that they have built in port "movers" that will scan the local network to find an available port to work on. Scripting is one way to do it....but that mostly just alerts you to the fact that there is traffice being used on your network for file sharing. I would like to know an exact way to block file sharing as well...

Jason Bethune

IT Specialist

Town of Kentville

354 Main Street

Kentville, NS 

B4N 1K6

www.town.kentville.ns.ca

  _____  

From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Johnson, Mark
Sent: Monday, September 15, 2003 1:37 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Blocking Music Sharing.

Due to the legal issues, I am trying to block access to sites like Kazaa and Limewire in the office.  If I am not mistaken, these networks can use different ports each time, so there is no way to block it at the firewall.  Is this right?  And if so, what is the best way to block access to these types of sites?

Many thanks,

Mark J. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030915/6bc56f2a/attachment.html