How to block UDP torrent traffic with WFilter?

[Noel]

I have setup port mirroring, its working now but I would like to know as I know it can't block UDP traffic and here users are downloading torrent whole day, I checked the log and UDP traffic going to pass to the internet.



Kindly suggest how to block UDP traffic or If I could block on my router.

[gengw2000]

WFilter is a passing-by filtering program which can only block TCP connections. That's why we require our users to block certain UDP ports(internet UDP ports:1024-65534) in their router. You may check for more information about passing-by filtering:

http://blog.imfirewall.us/Whats+The+Difference+Between+Passby+Filtering+And+Passthrough+Filtering.aspx



Actually, even SOHO router has ACL features to block UDP ports. I recommend you to add a certain rule to block remote udp ports 1024-65534 in your router. (only blocking remote UDP ports is enough, please do not block local UDP ports, otherwise it will affect your DNS query).



Let me know if further assistance is required. If you're not sure about setting UDP blocking rules in your router, please let me know your router brand/model.

[Noel]

Router Details :- Cisco 2811 , Please let me know how to block UDP ports on Cisco 2811 Router.



Also please let me know if I will block UDP ports in our Router, Can it block torrent downloading completely ?

[gengw2000]

You need to setup an ACL rule in your cisco router. However, we're not cisco experts. You'd better check cisco online manual or call cisco support: http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

The syntax is:



access-list access-list-number

[dynamic dynamic-name [timeout minutes]]

{deny|permit} udp source source-wildcard [operator [port]]

destination destination-wildcard [operator [port]]

[precedence precedence] [tos tos] [log|log-input]

[time-range time-range-name]



Or does this router have a web admin UI for you to setup certain rules?



When you block internet UDP ports 1024-65534 in your router, Bittorrent traffic can be completely blocked by WFilter.

[Noel]

Yes, we have an Admin UI interface (Cisco SDM) to create an ACL Rule in our Router (Cisco 2811) but bit confuse, would it be Inbound to Outbound or Outbound to Inbound ?



Fyi :- Fast Ethernet 0 :- Connected to our LAN

Fast Ethernet 1 :- Connected to the Internet

[Clovisius]

I'm using innacomm W3400V Four-port ADSL 2+ Wireless Router.



May I know what is the way to block remote port UDP?

[Clovisius]

Noel wrote: Yes, we have an Admin UI interface (Cisco SDM) to create an ACL Rule in our Router (Cisco 2811) but bit confuse, would it be Inbound to Outbound or Outbound to Inbound ?



Fyi :- Fast Ethernet 0 :- Connected to our LAN

Fast Ethernet 1 :- Connected to the Internet

Outbound, meaning for LAN.

[gengw2000]

I never used "W3400V Four-port wireless router" before. Does this router support firewall rules?

[Clovisius]

I don't think so, but this wireless router does support IP Filtering and parental control. what else do you want to know??

[gengw2000]

Then you can use this "ip filtering" feature to block udp ports 1024-65534.