Drop traffic Downloader.

[rrgg]

Hi all.

How to configure PIX-506 to drop all WinMX - eDonkey - Kazaa and similar traffic???

Tks for answer.

 

[themut]

You need to block this traffic at the application layer. Try to block it using a proxy server, or if you have a Cisco router you may want to look at NBAR (network based application recognition).

 

[chicocouk]

Spot on again. This doc gives pointers, but as yet there's no proper way to inspect this kind of traffic at the application level on the pix on it's own;

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a00801e419a.shtml

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[thule]

I beat this horse to death a couple of months back. Found the best way is to install a packeshaper behind the PIX instead of trying to block the traffic give it a non burstable partition of 1K of data. Users will eventually get frustrated and quit using the apps. A shaping appliance is recommended but you can do the same thing with a few open source apps if you like to program.