Blocking p2p

[Dylan_G]

Is torrent downloading illegal ..... and I thought we were a bunch of guys all called Pierre who were sharing

I thought that it was "downloading is legal, seeding or uploading is illegal" ?

 

[TEXTILE GUY]

I thought that it was "downloading is legal, seeding or uploading is illegal" ?

Dunno - According to this http://mybroadband.co.za/news/internet/103875-how-sas-first-online-pirate-was-caught.html

As the first case involving online distribution of copyrighted content, Norton’s trial had the potential to set legal precedent in South Africa.

Since it did not go to trial, however, there is still no case law on the issue of sharing copyrighted content using peer-to-peer technologies such as BitTorrent.

 

[Hamish McPanji]

Dunno - According to this http://mybroadband.co.za/news/internet/103875-how-sas-first-online-pirate-was-caught.html

Kind of funny that the guys name is Norton.

 

[TEXTILE GUY]

Kind of funny that the guys name is Norton.

Sure ... but the story makes it sound like it should be John McAfee

 

[Tman*]

Riiiigt, so I took delivery of My Mikrotik RB750 router, and after a few days or solid research and trying to configure the unit via Winbox I have some feedback...

Ive watched several YouTube tutorials in regards to setting up Mikrotik routers, and I am still a bit clueless on the exact instructions to follow. As we stand now I have the following setup:

Dlink ADSL router (with DHCP) > connected with TP-link WiFi AP (Static IP, and Mac filtering on the AP) > Users connecting via WiFi

What I intend to do moving forward:
Dlink ADSL router > Mikrotik Router > TP Link wifi AP > Users (connecting via Wifi)
I want to have the Mikrotik to run DHCP, so I assume that Im keeping the static route for the TP-link AP, but unsure if I need to adjust my Dlink ADSL router?

Now, according to some of the tutorials, different people are recommending different things. On the one hand I gather that I can set up the Mikrotik as a PPPOE client, and configure it as such (Ive successfully created a PPPOE client in Winbox), on the other hand tutorials recommend that I just set it up by configuring some IP's etc.

Ive also found this link with scripts on how to block p2p, ideally I would like to implement something like this: http://forum.mikrotik.com/viewtopic.php?t=73462

As I stand now I havent managed to get the Mikrotik router to work in conjunction with my ADSL router and my TP-link AP, and I am a little frustrated. If anyone can please recommend a simple setup I would really appreciate it.

In a nutshell I want the Mikrotik router to do all the routing and processing of the data (run DHCP server) and setup MAC filtering. Apart from that I just want to block p2p, so Ill implement the firewall rules in the link above.

Any help and/or guidance will be appreciated.

 

[Crystal Web]

Hi Tman,

If you'd like a simpler solution, we can arrange an ADSL account for you that blocks p2p entirely during the day and opens it up from midnight to 7am. But then again, learning to set up a router with QoS can be fun if you have the patience for it, and can also be quite rewarding.

 

[irBosOtter]

You should be able to block it via layer 7. Do a google search on blocking p2p via layer 7 on the RB. I used a guide a few years ago that worked perfectly

 

[longboy]

The easiest solution is to ask the people living with you to be considerate and stop downloading torents/p2p when you are on your pc.

 

[SauRoNZA]

Aaah I love it when Mikrotik supergeeks recommend Mikrotiks to endusers completely ignoring the ridiculous learning curve involved.

The results are almost always exactly like this one where the end user runs themselves into the brick wall and then everyone who recommended the product runs away because they don't want to help out.

 

[The_Ogre]

Aaah I love it when Mikrotik supergeeks recommend Mikrotiks to endusers completely ignoring the ridiculous learning curve involved.

The results are almost always exactly like this one where the end user runs themselves into the brick wall and then everyone who recommended the product runs away because they don't want to help out.

This is why I recommended OP to set up QoS in his current modem/router.

Mikrotik is NOT childsplay!

 

[DrJohnZoidberg]

This is why I recommended OP to set up QoS in his current modem/router.

Mikrotik is NOT childsplay!

Qos on consumer routers is just crap. Mikrotik or other more advanced firewalls may have a learning curve but they also do the job properly.

Was testing out using Layer-7 on my pfSense box the other night, works like a charm. I had a torrent, a NZB and a 1080p Youtube video running with no client side limiting, logged into Diablo and was getting between 200 - 300ms latency still. It's awesome when this stuff works.

 

[Tman*]

This is why I recommended OP to set up QoS in his current modem/router.

Mikrotik is NOT childsplay!

Guys, I am up for the challenge. I do enjoy learning and experimenting and I kinda figured that it wont be childs play to set this Router up. I took the plunge and purchased the unit, so there is no backing out now.

As for setting up QoS on my existing router, that wasn't really an option as it only supported very basic functionality.

 

[i.got~issues]

Perhaps I am a bit late to this party...

Why not just use OpenDNS Family Shield... punch its DNS setting into the router, p2p useless.

Primary 208.67.222.222
Secondary 208.67.220.220

Torrents are dead with this, as well as nzbs etc.

However, it also blocks all ** coff ** adult content as well.

I use it here in conjunction with nanny software to keep the kids from straying.

http://www.opendns.com/home-internet-security/parental-controls/opendns-familyshield/

Ive been doing some research over the last few weeks on what possibilities there are to block p2p via my router.

In a nutshell: There are numerous other people in my household that is using my internet connection, and I want to block torrents and nzb's so that everyone can have a pleasant experience with a generally faster line.

I do not have access to their devices, so I cant configure it in any way. The only details I do have, is the MAC address of each device, with an IP address.

As far as I understand you can limit/block P2P in one of the following ways:
1. Flashing your Modem to aftermarket firmware such as "dd-wrt" and configuring it accordingly.
2. Getting an old PC and running a program such as "pfsource" to act as your firewall/router
3. Blocking ports on your existing router and setting up QoS.

Unfortunately neither of my 2 routers support any type of aftermarket firmware, and I dont have space to run a secondary PC, so It seems like I am stuck with option 3? And from what I understand, port blocking isnt too effective?

What would be the easiest, most cost effective way to block p2p? At this stage I am considering to buy a new modem that has some sort of built in functionality.

Any help and advice would be appreciated!

 

[SauRoNZA]

Perhaps I am a bit late to this party...

Why not just use OpenDNS Family Shield... punch its DNS setting into the router, p2p useless.

Primary 208.67.222.222
Secondary 208.67.220.220

Torrents are dead with this, as well as nzbs etc.

However, it also blocks all ** coff ** adult content as well.

I use it here in conjunction with nanny software to keep the kids from straying.

http://www.opendns.com/home-internet-security/parental-controls/opendns-familyshield/

You'll still need firewalling to limit port 53 to those IP's only otherwise anyone can just use their own custom DNS servers.

It is a more elegant enduser solution however.

You can completely customize OpenDNS to only block what you want.

 

[Tman*]

Just a quick follow up on this thread:

I ended up buying a Mikrotik Router, and I was blocking p2p very successfully, until recently...

I implemented the following rules, that I got from this thread: http://forum.mikrotik.com/viewtopic.php?t=73462

1. add action=drop chain=forward comment="TORRENT No 1: Classic non security torrent" disabled=no p2p=all-p2p

2. add action=drop chain=forward comment="TORRENT No 2: block outgoing DHT" content=d1:ad2:id20: disabled=no dst-port=1025-65535 packet-size=95-190 protocol=udp

3. add action=drop chain=forward comment="TORRENT No 3: block outgoing TCP announce" content="info_hash=" disabled=no dst-port=2710,80 protocol=tcp

4. add action=drop chain=forward comment="TORRENT No 4: prohibits download .torrent files. " content="\r\nContent-Type: application/x-bittorrent" disabled=no protocol=tcp src-port=80

5. add action=drop chain=forward comment="TORRENT No 5: 6771 block Local Broadcast" content="\r\nInfohash:" disabled=no dst-port=6771 protocol=udp

I am not sure what exactly happened, but I guess uTorrent had a recent update or something? Previously I was blocking torrents, even when encryption was forced, with random ports, now everything runs - flat speed. I tested it on several PC's, and by just installing the client and downloading the torrent it runs, its not even like I am trying very hard...

Can anyone recommend any additional/other firewalls to implement to block p2p on a Mikrotik router? For the time being I am restricting users to 1mb/s (on a 4mb line) to minimize the traffic, but this is only a short term solution...