Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

p2p sharewarez

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> p2p sharewarez Page: [1]
Login
Message << Older Topic   Newer Topic >>
p2p sharewarez - 8.Sep.2006 11:40:14 PM   
mekaneky

 

Posts: 95
Joined: 15.Feb.2006
Status: offline 		Hi ,all

ISA 2006 SE on stand alone 2003 , some clients computers using share wares software as kaza and bitcomet,

these softwares using dynamic random port , so went to firewall client settings and under applications tab i add it as

( BitComet.exe ) and select value to disable.

i still see that application as session in ISA monitoring screen.

how can i stop like these softwares ( take in considartion no AD )
Post #: 1
RE: p2p sharewarez - 11.Sep.2006 5:12:13 PM   
tshinder

 

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Mek,

Leave out the file extension when you enter the Firewall client settings for the application name.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mekaneky)
Post #: 2
RE: p2p sharewarez - 12.Sep.2006 10:58:28 AM   
mekaneky

 

Posts: 95
Joined: 15.Feb.2006
Status: offline 		Hi Dr ,

do you mean BearShare instead of BearShare.exe !!!!!

(in reply to tshinder)
Post #: 3
RE: p2p sharewarez - 12.Sep.2006 3:37:44 PM   
tshinder

 

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Mek,

Yes!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mekaneky)
Post #: 4
RE: p2p sharewarez - 26.Sep.2006 2:54:14 AM   
mekaneky

 

Posts: 95
Joined: 15.Feb.2006
Status: offline 		hi dr

i add

BitComet >>> disable
BitComet >>> disable EX
BitComet.exe >>> disable
BitComet.exe >>> disable EX

and even all that it still connect !!!!!!!

(in reply to tshinder)
Post #: 5
RE: p2p sharewarez - 26.Sep.2006 1:15:30 PM   
tshinder

 

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Mek,

Is it connecting via its Firewall client configuration, or its Web proxy or SecureNAT configuration?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mekaneky)
Post #: 6
RE: p2p sharewarez - 26.Sep.2006 8:24:13 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: mekaneky

hi dr

i add

BitComet >>> disable
BitComet >>> disable EX
BitComet.exe >>> disable
BitComet.exe >>> disable EX

and even all that it still connect !!!!!!!



Removed Them all , except  :

BitComet >>> disable >>> 1
 
make sure the exe name of this software is BitComet in program files > respective folder



Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mekaneky)
Post #: 7
RE: p2p sharewarez - 28.Sep.2006 4:29:20 AM   
mekaneky

 

Posts: 95
Joined: 15.Feb.2006
Status: offline 		hi Dr , hi tarek

Is it connecting via its Firewall client configuration, or its Web proxy or SecureNAT configuration? >>> yes as firewall client


BitComet >>> disable >>> 1   <<<< it auto select 0 , have i to make it 1 ???? or let it as zero.??

(in reply to elmajdal)
Post #: 8
RE: p2p sharewarez - 28.Sep.2006 10:04:38 AM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		understand this :

0 = Off
1= on

right???

So BitComet >>> disable >>> 1  

means disabling this BitComet is ON.

so yes make it 1.



Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mekaneky)
Post #: 9
RE: p2p sharewarez - 30.Sep.2006 2:41:48 AM   
mekaneky

 

Posts: 95
Joined: 15.Feb.2006
Status: offline 		hi all ,

thanks dr , thanks tarek.

but i wonder if these applications connect as Snat or proxy can i pervent them ( kindly remember it is work group not domain )

(in reply to elmajdal)
Post #: 10
RE: p2p sharewarez - 30.Sep.2006 3:41:52 AM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		the best way to block apps is by using siganture to block them :
http://www.isaserver.org/articles/2004blockp2pim.html

HTH


_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mekaneky)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> p2p sharewarez Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts