I need to block LimeWire on my corporate network for bandwidth reasons, I just need to know what ports need to be blocked at the firewall to prevent my users from accessing this.
What ports should I block at the firewall to disable LimeWire?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
It would seem that the ports are 6346-6347, TCP.
First, this question means that you are not following security/firewall best practices by allowing everything, except what is denied.
The proper way to configure a firewall is to block everything, except what you allow. If you did that, Limewire would already by blocked.
Now, to your answer, the easiest way is to block ports from the 6300 to 6400 range (TCP and UDP) and also block the limewire web site, denying users the ability to even install it. You can also use ipp2p and l7, but they require kernel modifications and in this case might not be necessary.
Standard answer: Don't let your users install unauthorized software on their computers :)
But another way to handle this is to be more general in your control methods. We use a proxy server like a Bluecoat which can also throttle bandwidth. Then you force all Internet access through the proxy and block everything going out at your firewall. Most programs will work just fine with the proxy and you can create exceptions on an application by application basis, but the P2P stuff will likely just die at the firewall. If it does happen to work via the proxy, you can throttle it there easier.
You'd be better off doing packet snooping and filtering - most P2P programs allow you to change ports. Come to think of it, many allow packet obfuscation too. If this is a major concern, consider monitoring network traffic volume and investigating potential overuse? Wait, maybe that's too big-brother...geez, it's almost as if there's a whole industry fighting against itself to find the right balance between control and freedom...