Port blocking or URL blocking

Hi all,
We are using CISCO 836 routers for our WAN access. Due to the case the bandwith connection is limitted I was wondering how can we block users from using on-line games (such as yahoo or some other). In case we can block these connections, please let me know if we can block these connections during business hours only (e.g. 8-4PM)?
Thanks in advance!
csakos

Thank you it helped, however later on I decided to include time range in my original ACL and so got in to a problem how to remove
ip access-list extended BATTLEFIELD_2_DURING_BUSINESS_HOURS
from my configuration since if I use the following command
router(config)#no ip access-list extended ?
<100-199> Extended IP access-list number
<2000-2699> Extended IP access-list number (expanded range)
I cannot choose name or WORD of my already entered extended access-list in order to remove already entred extended access list.
Any suggestion?
My version of IOS is Version 12.3(2)XC2 and I am using CISCO 836 router?
Rgds,
csakos

Similar Messages

IPhone tethering to get around port blocking

Hello all. My company/institution blocks imap port 993 so that email is not stored locally on company computers. (I find this unreasonable but it is their choice). However, sometimes I bring my laptop from home and wish to access my mail using Mac Mail. I can do so using my iPhone as a modem, however the sweet solution would be:
- use company network for all requests except imap
- use the iphone when accessing imap and other blocked ports
This way i would not chew up my monthly data usage on the iphone, but be able to access blocked ports. Is there a good solution to do this other than manually connecting disconnecting the internet connections i.e. keep both lines open.
Thank you.
Message was edited by: patchling

Well:
a. It is my laptop
b. I would not be using their network for downloading the imap data
c. I would not be downloading the data onto their computers
The policy is there to prevent imap downloading onto company computers, or more specifically through their network. As an unfortunate side-effect it prevents my computer from accessing imap email via the network. I am, however, allowed to hook up my lap top to the network.
I would not be doing anything on their network. This is not a question of how to bypass their port blocking using funky ssh tunnels or the like. The question is how to run two internet connections at the one time (if possible), using one for the bulk of internet traffic and the other for connections disallowed by the first.
The last paragraph of your response was useful and so I thank you for that. The 1st paragraph has nothing to do with what I am asking.

Port blocked prevents app from working

Dear all,
Although I don't even have ipfilters support compiled into my kernel, external attempts to connect to my tcp port 4662 fail. This happens although (locally) nmap shows it to be open:
# nmap -sT -P0 -p 1-65535 localhost
Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-05-03 23:40 EDT
Interesting ports on thinkpad (127.0.0.1):
(The 65533 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
4662/tcp open unknown
6000/tcp open X11
Nmap finished: 1 IP address (1 host up) scanned in 2.805 seconds
However, it is impossible to connect from the internet to this port. Eg, I've used
http://www.amule.org/testport.php?tcpport=4662
and it always answers that the port is inacessible.
Do you have any idea why this port might not be accessible on my machine? I am a residential cable customer, so I'm not behind a firewall.
Thanks for any clue,
Mack

Actually a cable modem, acts as a router, as long as it has DHCP service in it, and im pretty sure its in NAT mode (so if you connect a switch to it, you can access internet from multiple PCs)...
Arch has no port blocking per default that im aware of.
EDIT:
Also, as you see with nmap the port is open in your computer, but you cant reach it from internet because when you are behind a NAT you have to forward that port in the router/cablemodem/dslmodem to your PC IP and port. This was what i was talking in my first post. (Im quite sure about the cablemodem being in NAT mode and causing this problem, but i could be wrong, in my case, this was the problem (though i have DSL)).

Windows Server 2008 R2 ( USB Port Block)

Dear Team,
I need to create a policy to restrict the USB port for every domain user.
Please guide in this regards,
Regards, Ravi Kumar

Hi ,
You can create a group Policy say "USB port blocking" in your domain and this Policy will apply your domain all domain users will not able to access any removal drive. Open GPMC console then user configuration then administrative templates then
system then removable storage access then select all removable storage access and enable it. Then go to command prompt and type gpupdate /force.

Wrt54gs port blocking

my wrt54gs is blocking ports and idk how to stop it.
I can't connect to ftp
I can't connect to sites using abnormal ports such as 8008.
(surprised how many sites use different ports)
wireless or wired.
If i reboot the router it lets me get to them for the first like 15 seconds then its blocked again....
I even placed my computer in the DMZ
I even factory reset
I even upgraded the firmware

Another thing to check would be the firewall software running on your computer. I have had problems where when you let the subscription to updates expire, the firewall software reverts to a very locked down state.
Out of the box, a WRT blocks almost nothing. If you had configured it to do some port blocking, you would know about it.
And just to eliminate the stupid stuff -- be sure the cable/DSL modem is plugged into the "Internet" port and not one of the numbered LAN ports.

Port Blocked on Structural Exception

Hi All,
I am facing one issue in which Inbound Port for auto imports is getting blocked.
Error message in the logs is "CR: 0x80010000 Out of Memory".
Can anyone please throw some light regarding this message and let me know what this means?
This is a Verbose message and setting 0x800 is used for keeping track of ImportX.
Then why is the port blocked on Structural Exception?
Thank You.

Hi Ankush,
It seems there is a high load on MDS causing the first error.
Try connecting through IM manually for the same record.
Also,if there is high data influx it is advisable to optimise port and MDIS parameters accordingly.
I did not get what is your second question but if you are asking why does the port block on structural Exception,then thats a setting which you can or not.But i have seen having exceptions in StrucX badly affects import process.
Also error 0x800 is also related to server being very busy,that may be the case here.
Thanks,
Ravi

Port Blocker..Help

Dear All,
i'm new in socket programming and i want to block my browser to browse for the internet, but i still want my antivirus ability to auto update their virus database..and i think i just block the port 80 for the www..my question is:
1. is this the right forum for me to ask a question and discuss about this port blocker?
2. what should i do to make this port blocker program?

1. is this the right forumNo. Locking this thread.

Carrier grade nat - static port block allocation.

Hello,
Is it possible to configure nat (cgn) on ASR 1k to permit the same private address always get the same port block allocation from the same public address? With that You dont need nat logging.
regards

ADAM619,
At the moment we're unable to answer these questions. When we have more information we will provide it here in the forums, and make it available at www.verizon.com. Thanks for your patience during this transition. ~Ian
Ian_VZ
Verizon Support
Notice: Content posted by Verizon employees is meant to be informational and does not supersede or change the Verizon Forums User Guidelines or Terms or Service, or your Customer Agreement Terms and Conditions or Plan.

Port Blocker in java

I am trying to block a network port in java?can anyone tell me how to do it using Java.net package

Re: Port Blocker in javaCannot be implemented.
I am trying to block a network port in java?You can't.
can anyone tell me how to do it using Java.net packageNo but I can tell you that it's impossible.

Incorrect port in Request.URL

I am using VS 2013. IIS 8.0 Express and Azure .NET SDK v2.2
With a simple WebAPI template project I am able to repro this. When I locally debug the project in the azure compute emulator, it starts up the web page in https://127.0.0.1. However, in the request, the URI comes up with port 444.
Is there any known fix / workaround for this bug?
I could find similar issues for others at following pages but their workarounds don't work for me. Nothing in Request object or Request.RequestContext.HttpContext.Request object has the right URL. For e.g. if I try to open https://127.0.0.1:444/,
I get "page not found" error.
http://stackoverflow.com/questions/21062617/wrong-port-number-in-mvc-4-windows-azure-request-url
http://stackoverflow.com/questions/15163670/request-url-has-wrong-port-information
Thanks!

After reading through this, I think this might be by design. The request is associated with DIP rather than VIP since it is
just been forwarded from the Load balancer.
However, this would still mean that I need to keep 443 unused for my service to function normally. My service redirect users to live login page and it has to provide the VIP domainname port as redirect url in order to get the request.
During local debugging, requests to url:port provided in Request.Url doesn't work. Overall this azure local debugging setup still is a mess.
Let me know if there is any other workaround/fix.

Airport Express Audio Port Blocked?

Hello all, I'm setting up my Airport Express to play music through my speakers. I've previously done this with no problems, but when I've come to set it up again, this time, the audio port isn't deep enough for the audio jack to fit in.
The jack is a standard 3.5mm, and has been used with this Airport Express before.
The port doesn't appear to be blocked (I can see the led at the bottom).
There are no rattles and the Airport Express has been well looked after.
Any idea what could possibly be causing this?
Cheers,
Ollie.

I have had a word with my housemates, it would appear that one of them accidently snapped off the tip of a audio jack.
How would I go about removing this? Is there an easy way to open the Airport Express? or should I take it to the apple store?

Azure networking - TCP ports blocked

Hi
I have a two-node SQL Server 2014 'SAN less' Cluster running in Azure (using SIOS Data Keeper as the 'SAN disks'). I have setup an Internal Load Balancer (ILB) that points to my SQL Cluster name (sqlcluster). However my external application needs to talk
to 'sqlcluster' over ports 135 (Endpoint Mapper) and 445 (SMB). This traffic is blocked in Azure. How can I allow this?
All of the above works in my on-premise world - just not in Azure.
Thanks

Update:
I noticed that quite a few windows updates were available, so I applied almost everything (a few failed). After the restart, I started Xming, and immediately got a firewall security dialog window, which I did not get before. I selected "public networks",
"private networks" was already selected, and selected "allow".
The above caused two new firewall rules to be created, but the guest -> host connection is still being blocked.
I've tried with firewall on and off: no difference.

Need Help on Port Blocking in ASA

Dear All,
I have configured firewall and allow only port 443 and deny all tcp ports for destination, but when i am scanning from port scanner it shows several tcp ports are enabled.. need your seuggestion and help on it.. how to block these tcp ports..
Early response is required..
Thanks

Hi,
Still don't know the ports that were supposedly open.
Though if that is the ACL you have bound to the "outside" interface on the ASA then it should be blocking the connections through the ASA for everything else other than the TCP/443 for a single destination IP address.
Then there is naturally the ASAs own services and ports on which its listening on.
You can check that with the following command
show asp table socket
Most likely the ports that are open on the ASA are the ones used for management purposes perhaps
Those set with the following commands
telnet
ssh
http
You also have the option to create an ACL that blocks all traffic to the ASA "outside" interface IP address. You can then attach it with "access-group" command
access-group in interface outside control-plane
This would limit the "To the Box" traffic. Though the above mentioned management commands "telnet", "ssh" and "http" would still override this ACL.
- Jouni

E 2500 port blocking

I am trying to block outbound and inbound traffic on TCP 5222 and 5223 on my E2500 but cannot figure out how.
The reason is I have kids in my house using KiK (texting app) on iPads, iPods etc. My goal is to eliminate this applications ability to function for ANY wireless device connected to my WLAN. Any ideas, thank all.

Apps can't be blocked on the router. What you could do is to block those websites/URL used by the apps or by keywords.
I have here the ways to do it.
Setting up parental controls to block specific websites
http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=3f929507766a432aa28c3aeca9e19833_Setting_up_parent...

Port blocked when Tomcat is made a windows service

Hi All
I have a web application which listens on some port for server response .That port gets blocked when Tomcat is made a windows service.But if i run tomcat normally this problem does not occure.So i am not getting what is exact problem?

Huh?
As a guess you mean that you when you run Tomcat the server port doesn't work.
The difference is because in one case you are running as one user and in the other you are running as a different user. On windows you are probably running 'without' a user because you didn't explicitly set one up.
The solution is to use an explicit user. That is also the way you should test. Log in as that user and run tomcat from the command line as that user.

Port blocking or URL blocking

Similar Messages

Maybe you are looking for