Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to block LimeWire on my corporate network for bandwidth reasons, I just need to know what ports need to be blocked at the firewall to prevent my users from accessing this.

What ports should I block at the firewall to disable LimeWire?

share|improve this question
add comment

7 Answers 7

up vote 5 down vote accepted

It would seem that the ports are 6346-6347, TCP.

http://www.ehow.com/how_2102913_block-limewire.html

share|improve this answer
add comment

First, this question means that you are not following security/firewall best practices by allowing everything, except what is denied.

The proper way to configure a firewall is to block everything, except what you allow. If you did that, Limewire would already by blocked.

Now, to your answer, the easiest way is to block ports from the 6300 to 6400 range (TCP and UDP) and also block the limewire web site, denying users the ability to even install it. You can also use ipp2p and l7, but they require kernel modifications and in this case might not be necessary.

share|improve this answer
    
I could not agree more with the block everything outgoing unless you know you need it. –  Matt Jun 17 '09 at 19:36
add comment

Standard answer: Don't let your users install unauthorized software on their computers :)

But another way to handle this is to be more general in your control methods. We use a proxy server like a Bluecoat which can also throttle bandwidth. Then you force all Internet access through the proxy and block everything going out at your firewall. Most programs will work just fine with the proxy and you can create exceptions on an application by application basis, but the P2P stuff will likely just die at the firewall. If it does happen to work via the proxy, you can throttle it there easier.

share|improve this answer
add comment

Block ports 6346,6347 TCP, UDP

LimeWire will probably use different port. You should block all ports except the ones you are using.

In case you have Windows, you can also set firewall on workstations to block
"C:\Program Files\LimeWire\LimeWire.exe"

share|improve this answer
add comment

+1 for Karolis T. and Roy.

As a side note, You should look into controlling who has rights to install software. Blocking limewire is the tip of the iceburg if people can control the software on the machines.

Installing spyware, viruses, disabling anti virus etc. are all bigger issues IMO

share|improve this answer
    
I just don't get how people can downvote advice in addition to the correct answer. Sure. Block the ports. Thats why I said +1 for Karolis and roy. –  MathewC Jun 17 '09 at 14:16
3  
It's not an answer to the question. Make it a comment instead. –  Pesto Jun 17 '09 at 14:21
    
I see your point, but still think it's an answer to the problem. Maybe not the question. It's sound advice. –  MathewC Jun 17 '09 at 14:23
5  
It's also sound advice never to go in against a Sicilian when death is on the line, but I'm not going to post it as an answer. Hell, you say yourself that this is a side note. –  Pesto Jun 17 '09 at 14:29
    
There is rarely a single answer to any problem in IT. Often the best answer is not the one you are trying to implement. How often have you seen shops set up using all kinds of crazy methods instead of best practices. The answer to the question is a list of ports that any admin should have been able to google. The real solution is to use best practices security and block everything and only allow what you need. –  Kevin Kuphal Jun 17 '09 at 14:31
show 1 more comment

take a look at netfilter modules ipp2p or l7-filter and block more then just limewire.

share|improve this answer
add comment

You'd be better off doing packet snooping and filtering - most P2P programs allow you to change ports. Come to think of it, many allow packet obfuscation too. If this is a major concern, consider monitoring network traffic volume and investigating potential overuse? Wait, maybe that's too big-brother...geez, it's almost as if there's a whole industry fighting against itself to find the right balance between control and freedom...

share|improve this answer
    
+1 to counter the pointless -1 that someone else gave this –  tomfanning Jun 17 '09 at 14:15
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.