A link found on another list describing how Kazaa tries to bypass filters... http://lists.q-linux.com/pipermail/ph-isp/2003-May/003234.html On Sat, 2003-08-23 at 20:47, George Vieira wrote: > well if it help, use squid to block anything to the kazaa servers (whatever they are..)since kazaa tries to use port 80, a transparent proxy would be good in this case.. > > Thanks, > ____________________________________________ > George Vieira > Systems Manager > georgev@xxxxxxxxxxxxxxxxxxxxxx > > Citadel Computer Systems Pty Ltd > http://www.citadelcomputer.com.au > > Phone : +61 2 9955 2644 > HelpDesk: +61 2 9955 2698 > > > -----Original Message----- > From: Jean-Rene Cormier [mailto:jean-rene.cormier@xxxxxxxxx] > Sent: Friday, August 22, 2003 9:50 PM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: Blocking Kazaa > > > Anybody know a way of blocking Kazaa? I've tried the string matching way > but it doesn't seem to work. I tried logging all connections from my > windows desktop so I could see to which port it connects and it connects > to so many different port that you basically need to block ports 1000 to > 4000 but after that it connects to port 80 which obviously I can't > block. I installed ethereal on the windows desktop to check which string > I could filter but couldn't find anything useful. > > Anybody have an idea what can be done? I'm thinking another option would > be to block the IP of the servers but there seem to be quite a list... > that's if it doesn't just try some random IPs... > > Jean-Rene Cormier > > >