topic IOS Blocking Bittorrent in Network Security

IOS Blocking Bittorrent

yelmuch — Sun, 10 Mar 2019 10:56:25 GMT

Hi,

Is there a way to stop bittorrent. I have tried using match statements in class/policy-maps with no luck.

I've moved on to using FPM but still no luck. I believe the newer torrent clients encrypted communications.

Any Ideas?

Regards,

Steve

class-map type access-control match-any bittorrent

match start l2-start offset 54 size 32 regex "\x13BitTorrent\x20protocol"

match start l2-start offset 54 size 32 regex "GET\x20.*\?info_hash="

match start l2-start offset 54 size 32 regex "[a|A][z|Z][v|V][e|E][r|R]\x01"

policy-map type access-control NOP2P

class bittorrent

drop

int dialer1

service-policy type access-control input NOP2P

tstanik — Tue, 22 Jan 2008 16:08:23 GMT

You can create an ACL on the router to block P2P ports such as 6881 (Bittorrent). Following link may help you

ckarwoski — Thu, 28 Feb 2008 17:25:50 GMT

You can use NBAR within IOS to block bittorrent. Here's an example of how to do it: