topic Blocking torrents in Network Security

Blocking torrents

techguy — Fri, 21 Feb 2020 12:39:35 GMT

Whats the best approach to block torrent....keeping in minf that i dont have pix/firewall but router

Blocking torrents

Leo Laohoo — Thu, 31 May 2012 05:36:59 GMT

.keeping in minf that i dont have pix/firewall but router

Active directory?

Re: Blocking torrents

Tagir Temirgaliyev — Thu, 31 May 2012 09:10:10 GMT

tcp torrent ports: 6969, 6881—6889

so configuration for router

ip access-list extended denytorrent

deny tcp any any eq 6969

deny tcp any any range 6881 6889

permit ip any any

interface FastEthernet0/0

descripcion To Provider

ip address ..

ip access-group denytorrent in

ip access-group denytorrent out

dont forget to rate post

Blocking torrents

techguy — Sun, 03 Jun 2012 07:54:35 GMT

quick question...

these are tcp port...andi think torrents also use udp ports ?

Blocking torrents

Tagir Temirgaliyev — Mon, 04 Jun 2012 04:46:15 GMT

google shows that ports

Re: Blocking torrents

rustomhind — Sun, 11 Feb 2018 10:59:04 GMT

Dear Tech Guy,

I came across this page while I was searching for something else entirely 😉

I was for sure that someone must have provided you with the right answer. Sadly they haven't. You can not block torrent using port numbers as any torrent client allows you to use custom port numbers. So let me guide you I have successfully done so in my production environment till now.

The commands are from an ISR 2811. Details are below

System image file is "flash:c2800nm-adventerprisek9-mz.151-4.M10.bin"

config goes as below

class-map match-any SCAVENGER
match protocol Konspire2b
match protocol bittorrent
match protocol directplay
match protocol edonkey
match protocol fasttrack
match protocol gnutella
match protocol kazaa2
match protocol webster

policy-map TRAFFIC
class MANAGEMENT
bandwidth percent 50
class SCAVENGER
drop
class class-default
fair-queue

interface FastEthernet0/0
service-policy output TRAFFIC

Works good enough till now.

Rustom Billimoria