how do you disallow gnutella connections to go out ?

[usderit]

We allow connections from our inside network to go out to the Internet. This is the default from high security to low security. Is it possible still to allow everything else but Gnutella port (6346 & 6347) to go out to the Internet. I think I should use the outbound deny statements but I don't want to put permit statetements for all ports & just deny the gnutella port. Is there an easier way ?

Thanks.

[rrbleeker]

Use an access-list on the inside interface and deny the Gnutella ports. Complete the list with an permit any any statement to allow all other traffic.

[usderit]

Thanks,