Blocking KAZAA sites using access-list

[mhel]

Anyone here who can help me how to block KAZAA sites using access-list

(what is the syntax)

thnx

mhel

[farshid_sh]

Hi

first off all you got to the whole block of ip address of kazaa

assumin 10.0.x.x 255.255.0.0

in order to block such addresses with access-lists

you need to create an extended access-list (100-199)

and permit every thing not equal to 10.0.x.x 0.0.255.255

access-list 110 deny any 10.0.x.x 0.0.255.255

access-list 110 permit any any

this accesslist must be an outbound access-list on your wan(internet)

connection

int s0/0

ip access-group 110 out

hope this helps

[mhel]

Hi,

farshid, can you check my existing config (partial).Co'z when i add the ff:

access-list 101 deny ip any host (kazaa ip host)

access-list 101 permit ip any any

int s0

ip access-group 101 out

my workstations cant access the net. What seems to be the problem?

............................................................................

access-list 2 permit (private ip) 0.0.0.255

access-list 2 deny any

interface Serial0

description 64l link to ISP

ip address x.x.x.x 255.255.255.x

ip access-group 101 out

ip nat outside

encapsulation ppp

no fair-queue

[ahvn]

Hi,

Call that access-list in the serial interface as inbound.And also permit other protocols like TCPand UDP along with IP in your 101 access-liost . ie ,

access-list 101 permit tcp any any

access-list 101 permit udp any any

Rgds,

Homin

[mhel]

Homin,

Thanks for the help. Actually they cant access now the Kazaa(Kazza)site.But if they using the Kazaa media desktop browser, they can download some files. A little more tricky, but what do you think?

thnx

mhel

[ahvn]

Nothing tricky mhel.Try including an access-list to block ftp traffic from the same IP.that would do.

access-list deny ftp host any eq ftp

That may be of help.

Rgds,

Homin

[omohamed]

if you are running newer cisco IOS then you can configure NBAR to block Kazaa....you need to download the kazaa pdlm from the cisco website..the URL below has the pdlm list and how to configure NBAR http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/dtnbarad.htm