Stop streaming music

[Julian Milano]

I just want to know which ports to block to stop my users from streaming
music from the internet. One such site which they are using is
http://www.triplej.abc.net.au/, specifically
http://www.abc.net.au/triplej/listenpop/listen.htm

I've noticed that the stream comes in at ports 1204 to 1300 (maybe further-
I gave up after port 1300). As I blocked port 1204, it tried on 1206, then
1208 then 1210, etc....going up in twos.

So how do I block these ports? I know I can block the site, but there must
be hundreds of streaming sites out there which can be used by my users.

Is streaming music always on the same port range?

Thanks.

Julian

 

[Jose B. Chua]

I just want to know which ports to block to stop my users from streaming
music from the internet. One such site which they are using is

Is streaming music always on the same port range?

The ports depend on the streaming protocol. There are many of these, and
there are new ones all the time. Specifically blocking each of those
ports will be an infinite catch-up game; allow all and explicit deny is
not a good policy. Generally, with a firewall, you deny everything, and
explicitly allow.

Streaming music is an additional problem, in that some of them can
stream over "legitimate" ports such as 80 (http). To stop those, you
need to proxy the web and filter based on content-type or http headers.
A stopgap measure until you can do that is to block the IPs of the sites
you mentioned.

 

[Julian Milano]

Thank you!

-Julian

The ports depend on the streaming protocol. There are many of these, and
there are new ones all the time. Specifically blocking each of those
ports will be an infinite catch-up game; allow all and explicit deny is
not a good policy. Generally, with a firewall, you deny everything, and
explicitly allow.

Streaming music is an additional problem, in that some of them can
stream over "legitimate" ports such as 80 (http). To stop those, you
need to proxy the web and filter based on content-type or http headers.
A stopgap measure until you can do that is to block the IPs of the sites
you mentioned.