I successfully blocked my users from being able to use Napster with the
following in my PIXs (v5.0):
outbound 150 permit 0.0.0.0 0.0.0.0 0 tcp
outbound 151 deny 64.124.41.0 255.255.255.0 0 ip
outbound 151 deny 208.178.163.56 255.255.255.248 0 ip
outbound 151 deny 208.178.175.128 255.255.255.248 0 ip
outbound 151 deny 208.49.239.240 255.255.255.240 0 ip
outbound 151 deny 208.49.228.0 255.255.255.0 0 ip
outbound 151 deny 208.184.216.0 255.255.255.0 0 ip
outbound 151 deny 169.254.0.0 255.255.0.0 0 ip (Not for Napster, just
blocks false DHCP)
apply (inside) 150 outgoing_src
apply (inside) 151 outgoing_dest
I haven't had any trouble with this configuration yet, and it's been three
months since implementation.
Good Luck!
Adam
-----Original Message-----
From: Mark Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 13, 2001 8:30 PM
To: [EMAIL PROTECTED]
Subject: Re: napster
Does Anyone know the ports that Napster runs over (Are the source and dst
the same)??
Also does it use TCP or UDP ?
Thanks
Mark
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
