Blocking Kazaa

[robotdave]

Hi

I'm still new to firewall and a lot of people on this site have been very good in helping me. So Thanks.

Anyway, how would I go about blocking ports for things like kazaa and blocking certian IP ranges from have

http://www access

and ftp etc.

Thank in advance for your help

RD!

 

[tbissett]

Kazaa seems to use TCP/1214 more than others, so try this simple access-list as a first shot. This access-list assumes you want to allow everything else out (never a good idea, but it seems to be what most people on this board prefer). If you want to deny other stuff as well, be sure to put those deny statements in BEFORE the permit statement:

access-list outbound deny tcp any any eq 1214
access-list outbound permit ip any any
access-group outbound in interface inside