We're also using Procera to block bit torrent. You can actually get around blocking legitimate torrents such as Blizzard updates by using property inspection and controlling the agent string and which trackers can be contacted. Sure it fundamentally breaks how torrents are meant to work, but at least the students can get their game updates.
At our university a lot of students are choosing to push their traffic through VPNs to get around the traffic inspection. On 14/09/12 00:23, Cal Frye wrote: Even with some packet shapers it can be difficult to get it all. Some clients are very adaptive, and if you block too many ports you'll find your P2P traffic running on port 80, or 53 instead! Is the problem with student-owned machines on your network or on your own machines? If the latter, desktop controls might be a more successful approach. It's hard to be too aggressive with this without having an impact on other, non P2P traffic. At that point it becomes a question of what other sorts of traffic you want to permit. We had to make exceptions for Warcraft updates, for example, as those take place via a BitTorrent mechanism. You may not have to worry about that without residence halls. Good luck! - Cal Frye, Oberlin College Patrick Printz wrote: > How do you block bittorrent and P2P traffic? Is it something that can be > done via policy or ACL’s? I know I could do it with a packet shaper, but > we do not have one yet. I am just curious is someone else has thought of > some ingenious way of keeping this traffic contained. > > > > *Patrick Printz* > > *Network Infrastructure* > > > > Quinsigamond Community College > 670 West Boylston Street > Worcester, MA 01606-2092 > > w. 508-854-7517 > > c. 508-726-9529 > > > > > > "If a man is called a street sweeper, he should sweep streets even as > Michelangelo painted, or Beethoven composed music, or Shakespeare wrote > poetry. He should sweep streets so well that all the hosts of heaven > and Earth will pause to say, Here lived a great street sweeper who did > his job well." > > ~Martin Luther King, Jr. > > > > * --To unsubscribe from enterasys, send email to > [email protected]<mailto:[email protected]> > <mailto:[email protected]> with the body: unsubscribe enterasys > [email protected]<mailto:[email protected]> > -- Cal Frye, www.calfrye.com<http://www.calfrye.com> --- To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
<<attachment: lucas_hazel.vcf>>
