Which TCP port does Kazaa use to communicate?

[sashi]

Hi guys,

I was wondering if anyone can guide in the correct direction. I was told that Kazaa doesn't use a predefined port, is this true? There has to some default port being use for some sort of action right? Does anyone here have any idea on this matter?

I need to prevent users from using Kazaa in a corporate network environment, am only able to that provided if i can trap the port used by Kazaa. I can set-up firewall rules to drop / reject packets destined to that particular port, this is the best way to block port / services in Linux.

Hope someone can provide some answer, thanks a million in advance.

Sashi.

[sashi]

Hi guys,

I came across an interesting link, according to the article Kazaa is designed to use port 80 if the default port 1214 is unavailable or blocked. I this true? Yes, the asnwer is true.

I did a little experiment, i blocked both inbound / outbound packets movement on port 1214 (TCP/UDP). I came to a shocking end when i learnt that users are still be able to use Kazaa happy everafter. How do i block Kazaa? It's not possible for me block port 80, isn't it?

Kindly refer to below attached link, it's a very resourceful link, hope it helps. Good luck & Take care.

PORT NUMBERS / Network Services (IANA)
Tips for msn,yahoo,kazaa

[sashi]

Hi guys,

These are sets of firewall rules am using to block Kazaa at the moment, hope someone can fine tune the below attached rule sets. Good luck & Take cae

Thanks in advance.

  iptables -A FORWARD -p tcp --dport 1214 -i eth0 -j REJECT
  iptables -A FORWARD -p udp --sport 1214 -o eth0 -j REJECT
 

[FuerzaDelDios]

u can check the ports being used by netstat -l

or u can look in /etc/services.

hope that helped.

regs,
FDD

[FuerzaDelDios]

u can take a look @ the followin link...

http://www.linuxforums .org/forum/linux-security/60698-iptablesfirewal l-port-block-not-working-urgent.html

[FuerzaDelDios]

For present state of network & connections(on your localbox)..

netstat -plant //for tcp netstat -planu //for udp




For checking open ports(for local as well any other box connected)

nmap -P0 -sT -v host-ip/name

[FuerzaDelDios]

Another suggestion:

u can capture the packets using ethereal.

First start ethereal, then run kazaa. The application should send some control packets when it comes up. That should tell u the default ports being used.

Hope that helped.

FDD

[sashi]

Another suggestion:

u can capture the packets using ethereal.

First start ethereal, then run kazaa. The application should send some control packets when it comes up. That should tell u the default ports being used.

Hope that helped.

FDD

Hi there,

A million thanks to you, the details provided really helped me alot. Good luck & Take care.

[FuerzaDelDios]

no problemo.. :)