blocking bittorrent traffic

[intehnet]

hey all,

is it simply a matter of blocking ports 6881 through 6889? is there no need for protocol inspection over port 80 or can't they tunnel through it?
got a client who is "accept unless specifically denied", and i'm trying to do the impossible in blocking p2p without a deny any any rule at the end!

thanks

[thefunkygibbon]

blocking the ports you specified should work to an extent, but most bittorrent clients you can specify what ports it should use, so they could just change them and it would work again.

Smartdefence has now got built in protection for various p2p networks including bittorrent, so that would be the best route at stopping the traffic, by inspecting what sort of traffic it is rather than the port its traveling via.

[intehnet]

done, thanks.