The kazaa protocol was built so it is extremely difficult to block... there's no way your going to block it by just closing off a few ports, it's smarter than that. -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx]On Behalf Of eribicic@xxxxxxxxxxxx Sent: Wednesday, May 21, 2003 11:58 AM To: georgc@xxxxxxxxxxxxxxx; jaws@xxxxxxxxxxx; netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: how to filter kazaa isnt it easyer to filter ports 1214? > The following rule has worked for me. > > http://www.securityfocus.com/infocus/1531 > > > $IPTABLES -A FORWARD -p tcp -m string --string X-Kazaa-Username: -j REJECT > --reject-with tcp-reset > > $IPTABLES -A FORWARD -p tcp -m string --string X-Kazaa-Network: -j REJECT > --reject-with tcp-reset > > $IPTABLES -A FORWARD -p tcp -m string --string X-Kazaa-IP: -j REJECT > --reject-with tcp-reset > > $IPTABLES -A FORWARD -p tcp -m string --string X-Kazaa-SupernodeIP: -j -j > REJECT --reject-with tcp-reset > > -----Original Message----- > From: tracker [mailto:jaws@xxxxxxxxxxx] > Sent: Wednesday, May 21, 2003 3:20 PM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: how to filter kazaa > > Hi all, > > Im new to this list and iptables. I would like to know how to filter kazaa. > > Thanks. > > Jaws > > > -- Slds.