IOS Blocking Bittorrent

[yelmuch]

Hi,

Is there a way to stop bittorrent. I have tried using match statements in class/policy-maps with no luck.

I've moved on to using FPM but still no luck. I believe the newer torrent clients encrypted communications.

Any Ideas?

Regards,

Steve

class-map type access-control match-any bittorrent

match start l2-start offset 54 size 32 regex "\x13BitTorrent\x20protocol"

match start l2-start offset 54 size 32 regex "GET\x20.*\?info_hash="

match start l2-start offset 54 size 32 regex "[a|A][z|Z][v|V][e|E][r|R]\x01"

policy-map type access-control NOP2P

class bittorrent

drop

int dialer1

service-policy type access-control input NOP2P

[tstanik]

You can create an ACL on the router to block P2P ports such as 6881 (Bittorrent). Following link may help you

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6947/ps5207/ps6242/prod_white_paper0900aecd802efa46.html

[ckarwoski]

You can use NBAR within IOS to block bittorrent. Here's an example of how to do it:

http://slaptijack.com/networking/controlling-peer-to-peer-p2p-traffic-with-cisco-nbar/