Blocking iTunes downloads on firewall

[darkhappy]

Everywhere I look for info on this I see the same thing, block Port 3689 TCP and Port 5353 UDP. Yet when I do real-time testing on my network (download itunes, login, browse/listen to music clips, purchase & download) - everything happens over port 80, except for the purchase which happens over port 443.


I guess I am going to block all of the ip's associated with itunes instead.

Anybody else already done this?

 

[electronicsfreak]

Why not just put in a policy to disable itunes? Better yet, just remove it from all the machines and prevent installs from anyone that is not an administrator.

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[darkhappy]

I would rather see what is being used before I start locking stuff down. I finally found the answer on apple.com - the itunes store server is phobos.apple.com and is accessed over port 80.