Tag Info

Hot answers tagged

13

Blocking Bittorrent is challenging, and can't really be done effectively with port blocks. The standard ports are 6881-6889 TCP, but the protocol can be run on any port, and the peer-to-peer nature of the protocol means that discovering peers that use unblocked ports is simple. Blocking Bittorrent traffic could be done with a deep-packet-inspection or ...


11

This is a bandage for a much larger issue... When I setup networks for small offices (50 clients or less) I'll use a business-class (entry-level) wired router such as a Fortinet Fortigate 40C or a Cisco RV042. You can block traffic based on: IP - Addresses and Ranges FQDN - Fully Qualified Domain Names Geography - You can block access to countries if you ...


8

BitTorrent uses a method called Chucking, in which files are divided into 64KB-2MB pieces and each piece is further divided into 8KB-32KB chunks. Each chunk is hashed and the hashes (along the chunking information) are stored in the torrent's metadata (the small .torrent file, or the metadata you receive via DHT). That, along with the info_hash, makes ...


6

Without a backdoor installed on your machine, an attacker would not be able to know what software was installed. If 100% of your traffic passes though an encrypted VPN, then it is not possible for an ISP to know what data is being transmitted. However, protecting the transport layer with a VPN may not conceal the type of protocol used to transmit the data. ...


5

The BitTorrent Sync Android and iOS apps seem to follow the BitTorrent.com privacy policy which states explicitly that they gather data such as total traffic and performance metrics. We also aggregate some data from the BitTorrent Client regarding total traffic flows and content delivery performance. I don't see any problem with that; it's completely ...


5

You have a number of ways to restrict torrents: Blocking ports: this doesn't work, because p2p traffic can use pretty much any port (even ones below 1024) Deep inspection: looking at traffic and blocking based on type can help you a lot, however encrypted traffic all looks alike Destination filtering: this may also help a bit, but you'd have to maintain a ...


5

First of all, there's nothing inherently dangerous or illegal (except perhaps in unusual jurisdictions) about using BitTorrent. There are plenty of free clients out there all that are well-respected and trustworthy. BitTorrent is frequently used to distribute large open-source projects, such as ISO files for Linux distributions. It's also used by companies ...


4

ISPs have never been involved in the process of determining weather or not specific traffic is related to a Copyright violation. From a technical perspective the ISP is one of the worst places to impermanent such a monitoring system. (There is a huge amount of traffic flowing through an ISP, and huge number of possible copyright violations. At best case ...


2

The growing popularity for Torrent proxies is for anonymity. You can encrypt traffic all you want, but it can always be traced back to the public facing node. The contents of your communication will remain private, however it can be identified that your IP address was in communication with a remote IP address. Without a proxy that will trace back to either ...


2

As far as I know pfsense performs very simplistic traffic shaping where by it prioritizes traffic based on port range. This is just so that you can play games with someone else using BitTorrent on the network. This is just to be friendly, this is not for "security". Trying to filter all BitTorrent traffic at the gateway is very a difficult problem and a ...


2

BitTorrent can run on any port, and can be wrapped inside SSL, so blocking by ports or traffic data isn't going to get you anywhere. My suggestion would be to block HTTP traffic on any port which matches the tracker announce protocol, as per the specification. This won't work if the tracker is running on HTTPS, but most don't. It also won't prevent DHT from ...


1

Port Forwarding is just a technique used to enable "proper" network connectivity for some applications that are running on NATed devices (almost all home computers). Port forwarding in itself a risk factor - the risks occur with regards to how the destination computer handles the incoming connections. e.g. If you forward port 22 (SSH), make sure you have a ...


1

Port-forwarding means that when a connection is attempted on a specific port on your router, that connection will be forwarded to you (a machine behind the NAT) on that specific port (or, depending on the setup, it can be a different port, but let's not get into that). Is it risky? Well, it can be risky. It all depends on the application listening on that ...


1

I think that you can make use of one of these possible solutions: You can use a third party software other than Ms, like ISA server or kerio firewall prog, which is a good option depending on your needs you will have to create a set of rules for blocking ports, mostly all p2p programs use a determined bunch of port numbers. You can use the service of sies ...


1

I would suggest that you use a free UTM such as the one from SOPHOS. it will sit at the place of your firewall and has all in one features for a small office and is free. It will give you the ability to block and monitor the website categories you want. Also, it can protect against malicious downloads.


1

The first thing I would take a look at is your firewall. Why is the common port used by torrents open for instance? Probably because your firewall has an implicit allow. You need to change this to an implicit deny and white list what you would like your users to do. For example you could say only this proxy server may connect out to the internet over ...


1

You could take a look at a recent technical paper, The Unbearable Lightness of Monitoring. The authors of that paper talk about how the BitTorrent protocol itself allows people to see what Internet Protocol addresses take part in the P2P downloading aspect of BitTorrent. They also say that they have a way to detect monitoring IP addresses, and say that ...



Only top voted, non community-wiki answers of a minimum length are eligible