well if it help, use squid to block anything to the kazaa servers (whatever they are..)since kazaa tries to use port 80, a transparent proxy would be good in this case.. Thanks, ____________________________________________ George Vieira Systems Manager georgev@xxxxxxxxxxxxxxxxxxxxxx Citadel Computer Systems Pty Ltd http://www.citadelcomputer.com.au Phone : +61 2 9955 2644 HelpDesk: +61 2 9955 2698 -----Original Message----- From: Jean-Rene Cormier [mailto:jean-rene.cormier@xxxxxxxxx] Sent: Friday, August 22, 2003 9:50 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Blocking Kazaa Anybody know a way of blocking Kazaa? I've tried the string matching way but it doesn't seem to work. I tried logging all connections from my windows desktop so I could see to which port it connects and it connects to so many different port that you basically need to block ports 1000 to 4000 but after that it connects to port 80 which obviously I can't block. I installed ethereal on the windows desktop to check which string I could filter but couldn't find anything useful. Anybody have an idea what can be done? I'm thinking another option would be to block the IP of the servers but there seem to be quite a list... that's if it doesn't just try some random IPs... Jean-Rene Cormier