Blocking P2P applications on WRT300N (V1)

Hello, I am currently using a WRT300n V1 with firmware version 1.03.6. Having trouble with my room mate downloading a hell lot of stuff using bittorrent. I talked to him but he refuse to stop. I play an online game and i am getting 1000+ ping which makes it impossible to play. I tried a lot of things, including Access restrictions etc. They don't seem to work. I am using the wireless, while he is connected to port 1. I tried lowering the qos on port1 to low. Nothing seems to work. Is it something wrong with the firmware? Any help would be appreciated. Last option is to get a new connection for myself.

Flat out doesn't work. It's an all or nothing affair. Either you block complete internet access between the hours noted or all days, or it's complete access to everything. The router cannot block specific ports even though it claims it can.

Similar Messages

How to block p2p applications(Bittorent like) with AIP-SSM-10?

Hi,
How to block p2p application using AIP-SSM-10 working with ASA5520?AIP is on promiscuous mode.
Thanks,
Siva

There are several signatures that detect p2p, for bit torrent there is 11020.0
Yahoo triggers: 5539.0, 11200.0, 11212.0, 11217.0 & 11219.0
etc..
Some are disabled by default though so please ensure you enable the ones that you need.
If you want to block these then you will have to use event actions that work in promiscuous setup for example request block connection and tcp reset. Please note that care must be taken when using these event actions.
For more information about the event actions please refer the link below:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmevtrul.htm#wp1069467

Want to block P2P application using ASA5540

I want to block P2P application & IM using ASA with IPS built-in. I dont wanna use the ACL for all the ports because most of the P2P application using dynamic ports.

Aamir,
You can do this using the application layer inspection on the firewall.
Please take a look at the configuration guide given below.
http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/firewall/inspect.htm#wp1479354
Rate this post, if it helps.
Cheers
Gilbert

Blocking p2p application traffic and tunneling

I need help ........
We have taken two ASA with AIP card, and have configured Active/Active , but user are using p2p and tunneling softwares . how can we block p2p and tunneling traffic ..
plz anyone reply me..........
regards

If you are using Firewall software 12.4(9)T and above, it has integrated policies to block or rate limit p2p application traffic using dynamically updateable application
definitions for newer p2p applications. KaZaA, Gnutella, BitTorrent, and eDonkey are currently supported.
You may also see this: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00801e419a.shtml

Blocking p2p on router 877

Hi,
Can anyone suggest how can I effectively block p2p traffic like Ares, Limewire or other with Cisco IOS 12.4(6) or higher? I tried NBAR but I guess there is no PDLM available for Ares for instance.
Many thanks for any suggestions.
Remi

Hi,
to block p2p traffic you need to block all ports except these you really need.
For example block all ports except http, https, smtp, pop3, dns.
Becouse some of the p2p applications use port 80 to connect there is an options in firewall(classic or Zone-Based Policy Firewall) called protocol-violation and port-missue!
This options prevent non-HTTP traffic over port 80.
For Zone-Based Firewall reffer to this link:
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml

Webutil_host.blocking procedure blocking the application intermittently

we are using webutil_host.blocking procedure to open a word document and have the application blocked until word document is closed. It opens the word document fine but blocking the application intermittently. Since it was not blocking intially, I started debugging and tried recompiling the form. It is now blocking the application fine, with no change in the code. It is definitely not the recompilation that made the trick because I compiled the form many times earlier while I was working on other parts of the form. Please share your expertise if anyone had the same issue.

we are using Forms 10.1.2.0.2 with Webutil 1.0.6

I want to block gambling applications on my iphone as i have a gambling addiction

I want to block gambling applications on my iphone as i have a gambling addiction

If you look in Settings-->General--> Accessibility, you will see there is an option called "restrictions" or something like that.
Ask someone who knows you to set up a code unknown to you and select in apps to authorize only 4+, 9+, 12+ and 17+ apps, since gambling apps should be available to only 18+

Is there a firewall that can block an application?

I'm looking for a firewall that can block applications.
The firewalls for linux that I've found using google and also the one I'm using now can not block an application. There used to be an option for iptables (-m owner --cmd-owner programname), but since kernel 2.6.14 they've removed this option for iptables.

eric, when you say u want to block applications, do you mean you want to block some of your applications getting out, or illicit use of ports for someone to get in ?
if its the latter, it may be that the firewall rules regarding "accepted, related, established" cover this as when you make rules, whichever firewall application u use, you can drop any incoming connections that arent following the state matches in your ruleset.
if you are concerned about ports being open to accept certain programs data, go to www.grc.com and use Shields Up to check. its a long while since i used any of this as i have a hardware firewall/router now, so apologies for lack of detail.
iptables/netfilter help here

Block P2P software using ASA-AIP-SSM-20 module

Hello,
I have got a question about blocking P2P traffic on ASA AIP module. I have searched the forums and all I could find were solutions using regex, port block, MPF, but no AIP implementation example.
Could anyone point me in the right direction please ?
Many thanks,
Martin

Hello Paps,
Many thanks for your reply. I was searching the web like crazy for some solutions using IPS and it never occured to me that I could just simply look for the signature files on Cisco website.
Thank you very much again
With regards,
Martin

How to block ultrsurf application.

Dear All,
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:Arial;
mso-bidi-theme-font:minor-bidi;}
Dear All,
How can I block Ultrasurf Application?
I have configured Cisco ASA 5520 with Cisco CSC-SSM module.
I have blocked everything Except Business and banking activities.
But user can access A 2 Z traffic through Ultrasurf.exe application. which bypasses all possible firewalls.
How can I blocked this application?
Any solution??????????????
Thanks
I.A

Hello Eric,
Sorry, for not updating the post recently. I resolved the issue.
I created a custom url category, created a decryption policy and put the action "Decrypt" for this custom url category as mentioned in the kb article.
I put the action Decrypt also for the uncategorized urls and tested it for a user standing only in one AD group. It worked. The skype traffic was blocked.
It worked also when I excluded this custom url category from this decryption policy and put only the "Decrypt" action for uncategorized urls.
Thank you for all your support Eric,
Have a great day
Ilir

P2P Application

How do i create a P2P Application using just Java Sockets

thanks for ur concern
By the Server Application i mean that i don't want to run a Java Server Application which accepts Client Connections.
let me explain the program in details and also specify the problems
1) Login is done with the help of the Username And Password -- working
2) when login a sockets r formed to connect to all the people in the network whose IP and Username is present in the database. Thats the end of datatbase thing. No requirement of that.
3) Now the program sets up a listener.
4) Incase another user logs in the same steps 1) 2) 3) repeat for him/her too.
5) The listener picks up the incoming socket and shows that the user is online.
6) incase a socket breaks or in other words the user logs out then the Socket gives and exception which shows that the user is disconnected.
Don't worry about the number of connections. I have streamlined that. Also you can see that the database is only access once.
----------- Thats the connectivity thing. -----------------------------------
Now the filesharing part1) the user is logged in and the connections are established
2) i use the same thing you mentioned.
Then whats the problem???The problem is that this Program of mine works fine when the users are within a short range(say in a city) but fails outside.
Is there a limit that an IP address can be used only in within some range or is the firewall got to do something with it??????
Also one more question: I am using Apache as the Server Application which executes ASP Files on my PC. I want the program to run HTTPConnection to my PC and run ASP files in Apache. However this is not happening. The users within the city r also not able to connect.
please help me and if you are interested in the code i can send you the code

Resources on creating P2P applications

Hi everyone! I'm currently a student working on a hobbiest project to gain a better understanding of P2P applications. The idea is to build a P2P search engine where each server/client updates their own database with domain urls by using a spider program that comes with the application. Everytime someone updates their own database, I need a protocol that will update everyone elses database so everyone on the network has the same database. So essentially everyone works together to develop the database as opposed to a centralized server approach. (I hope thats not too confusing).
**Any resources on how P2P applications work will be a huge help. I have little knowledge and am still a student. Also I am planning on using PHP and mysql for internet application. However any other suggestions would be helpful as well. Thanks to all who respond, I really appreciate it.

That isn't actually a "topic", but a whole collection of topics. There are too many open questions there to be able to say anything useful.

Howto block p2p traffic of clients connected to the same ssid on different wlc

Hi all,
I use two wlc 4400 (4.2.x version) with a mobility domain and one ssid, both wlc are connected to a cisco l2 switch infrastructure. On the wlc I use the p2p blocking action 'drop' (http://www.cisco.com/en/US/docs/wireless/controller/5.2/configuration/guide/c52wlan.html#wp1209597) to isolate the clients from each other. Does anybody know if only unicast traffic is blocked or also multicast and broadcast traffic like arp requests?
Concerning blocking p2p traffic of clients connected to the same ssid but different controllers I found the following statement in the LAP FAQs (http://www.cisco.com/en/US/products/hw/wireless/ps430/products_qanda_item09186a00806a4da3.shtml):
===
Q. In autonomous APs, Public Secure Packet Forwarding (PSPF) is used to avoid client devices associated to this AP from inadvertently sharing files with other client devices on the wireless network. Is there any equivalent feature in Lightweight APs?
A. The feature or the mode that performs the similar function of PSPF in lightweight architecture is called peer-to-peer blocking mode. Peer-to-peer blocking mode is actually available with the controllers that manage the LAP. If this mode is disabled on the controller (which is the default setting), it allows the wireless clients to communicate with each other through the controller. If the mode is enabled, it blocks the communication between clients through the controller. It only works among the APs that have joined to the same controller. When enabled, this mode does not block wireless clients terminated on one controller from the ability to get to wireless clients terminated on a different controller, even in the same mobility group.
===
Does anybody know what's the best practise to prevent this inter wlc client traffic? I already read about using acls on the wlc dynamic interfaces, or private vlans on the l2 switch vlans where the dynamic interfaces are connected to. Is it allowed to completely isolate the wlc from each other on these dynamic interfaces with acls or private vlans or do the wlc need to see each other on this interfaces (e.g. heart beat)?
Many thanks in advance,
Thorsten

Hi Sasha,Thorsten
The bug is Junked and I believe which is what you are running into with your tests:
CSCtr60787 WLC P2P Blocking Set to Forward-UpStream Doesn't Work.
Bugtoolkit : http://tools.cisco.com/Support/BugToolKit/action.do?hdnAction=searchBugs
To answer your original query :
ACL is only solution to block client communication on same ssid between 2 wlcs. 5508 works better with ACLs then 44xx platform.
ARP requests will be forwarded to upstream router just like any other traffic. WLC won't proxy arp for clients on same vlan.
Gateway arp's I believe should be handled by WLC . ( Don't quote me on this but I am pretty sure it is ) ..If it was not, then how would client know about gw ?
Multicast traffic is not applicable for p2p.
Your ACL can be as simple as this for the scenario :
WLC 1 - clientvlan = 10
WLC 2 - clientvlan = 10
and you want to restrict users from wlc1-wlc1, wlc1-wlc2, wlc2-wlc2 for same vlan10.
Basically in that case the ACL should look like on both WLCs :
1. Permit statement to talk to gateway.
2. Deny to subnet.
3. Permit all.
4. If DHCP/DNS other services are on same subnet then you would need to add a permit
statement before the deny.
5. Attach the ACL to SSID or dymanic interface.
Thanks..Salil
CSCtr60787 WLC P2P Blocking Set to Forward-UpStream Doesn't Work.

Modal dialog limiting the mouse pointer and blocking all application

I wanted to create a modal dialog that blocks all application in my desktop. Only password field be present and exits only if correct password is typed. I also wanted to limit the mouse pointer within the window of the modal dialog. Will that be possible? i have read modality feature of Mustang(beta) and notes there that system modality is not included. Can anybody there give me an idea how to do tricks on blocking all applications of the desktop? I will be much grateful to anybody who could solve this problem. Thnx in advance...

tnx Sarcommand ..i give up on that, i understand the risk if that feature is included..
all i wanted is to make an internet cafe client/server that blocks the client's pc interaction if log time is reached.blocking only the keyboard and mouse.
i have seen so many softwares sets the cursor position within the dialog bounding box only with user and password there. though my other application runs the mouse is still captured on the dialog even the dialog lost focus.
if that would not be possible I'll just send notification to the client, a dialog that does not block any application.
now, im going to try if the client can do som action whenever the server sends alert if the client java app is not the focus. i will post next time what hapens.but if you tried already, if u dont mind posting it so others could know it also..
tnx so much Sarcommand..

WRT54G Ver 7 with P2P application

I searched over the Internet for a long time and found that the following facts (problems) on WRT54G Ver 7 with P2P application:
1. No maximum connection port can be configured from the factory firmware.
2. Router hang when maximum connection port reached.
2. No custom firmware like DD-WRT or Tomato can be used in Ver 7.
3. No available official firmware update yet.
Conclusion: Nothing can be done except giving up those applications.
Please correct me if any wrong
Message Edited by human_mage on 07-03-2007 06:44 PM
Message Edited by human_mage on 07-03-2007 07:00 PM

Nevermind. I found the upgrade from local Linksys website:
which fixes the above problems.
(Mod note: Inserted hyperlink to prevent other browser from stretching.)
Message Edited by OnnagokorO on 07-03-2007 11:14 PM

Blocking P2P applications on WRT300N (V1)

Similar Messages

Maybe you are looking for