Torch screen capture - What do you think he/she is doing?
What do you think this client is doing. He/she is doing this kind of stuff all day
it seems they have advanced in their technology in hiding from this filter rule. here in forums macgaiver posted configuration that could fight that "bastardo"i looks like a p2p
but when i go to IP/Firewall/Connections ... there aren't any connections detected as P2P for this user
and i've got this rule in firewall
3 ;;; Drop P2P
chain=forward p2p=all-p2p connection-state=established action=drop
you mean this thread? http://forum.mikrotik.com/viewtopic.php ... =macgaiverit seems they have advanced in their technology in hiding from this filter rule. here in forums macgaiver posted configuration that could fight that "bastardo"i looks like a p2p
but when i go to IP/Firewall/Connections ... there aren't any connections detected as P2P for this user
and i've got this rule in firewall
3 ;;; Drop P2P
chain=forward p2p=all-p2p connection-state=established action=drop
Not easily - deep packet inspection isn't possible due to the encryption. Other means of tagging the packets will need to be devised and I think that's easier said than done. I haven't specifically looked at such traffic although if they're anything like Skype traffic...these can't be dropped?could be encrypted uTorrent or Azureus
That seems like a nice idea - if one exceeds (for example) 300 connections - HE will have problems with other progs (messengers, browsers, send/recv emails...)That looks like P2P using Random Ports. You might want to consider limiting TCP connections down to a certain number. Or impliment some P2P rules.
Btw, how to limit number of connections for pppoe user(s)??
D.
hard to be findwhere can i obtain a list of torrent servers?
http://torrents.to/
have lot of torrent server listed, i see 300+
other variant
block web pages with "bt." "torrent" "torrents"
and maby hard hardest thing
see most used addreses on port 80 in time before begin big downloads
your best bet is to just queue ports above 1024...and then just look for other legitmate ports that you customers use and open those one at a time or 3 at a time accordingly.
also another thing that most ppl dont think of when looking at a torch scan is that it can be Xbox Live or somekind of online gaming in which your customer is the host...
i.e. i did some tests and when i'm hosting a online game on my xbox 360 you will see a spread of ports and dst's with consistant TX on each..some more than others
also another thing that most ppl dont think of when looking at a torch scan is that it can be Xbox Live or somekind of online gaming in which your customer is the host...
i.e. i did some tests and when i'm hosting a online game on my xbox 360 you will see a spread of ports and dst's with consistant TX on each..some more than others
Who is online
Users browsing this forum: ieleja and 39 guests