Quality-of-service QOS control and bandwidth caps for endpoints could limit the impact the Bittorrent users are having on your overall bandwidth, without the cat-and-mouse game of trying to block a particular protocol. Another approach would be to block the types of connections that Bittorrent requires.
As a peer-to-peer protocol, peers outside your network need to connect in. A firewall could prohibit incoming connections to your user subnet, while permitting them to your intended outward-facing services. An IPS could put a threshold on the number of incoming and outgoing connections, since Bittorrent clients need to connect to multiple peers and have multiple peers connect to them in order to function.
If your concern is the legality of the shared content or if you plan on taking any action against your users , then your best defense is a well-written acceptable-use policy outlining the users' responsibility for their actions and forbidding the use of file-sharing software.
Bad news : you probably don't know torrent proxies that runs on port 80? They allow users to redirect their torrent traffic to the regular port 80, so you won't be able to do anything with ports. Alternative : you could search for a list of popular torrent trackers and ban their IP eg the most famous French tracker is tracker.
Users still can use proxies and VPN, but most of them will be discouraged. Search for torrent proxies too. Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Example I only set port for the port range of the torrent port forwarding.
Or I must set a range of port no. Once I set the preferences for Listening Port Port used for incoming connections to a specific port, example the port no. What Beasly is saying is that you can use any single port number in the range of TO Thanks a lot. The default there is Start new topic. Recommended Posts. CrVMo Posted May 16, Posted May 16, Many thanks CrVMo. Link to comment Share on other sites More sharing options The only port you have set in pref.
Port forwarding allows for seeding, faster seeding, and also allows other peers to find you, rather than your client having to go search for other peers. Not sure if this affects download speed though. I just noticed the significant difference on my Freenas using Transmission. Add a comment. Active Oldest Votes. Improve this answer. The way I understand it which may be wrong is that with no open port, your client has to find and initiate all connections to other clients.
It only looks for new connections every so often, sometimes with long delays between tries, so it can be much faster if other clients can find you too whenever they happen to look. This is really just another way of saying the same thing as this answer. But, I heard a concept known as nat hole punching wouldnt it be used by passive nodes?
My original answer was not that clear, I'm sorry. Hopefully this is better. BrianC BrianC 4 4 silver badges 10 10 bronze badges. Anyone who cares about security would ensure uPnP is off. It's a terrible idea! MattH Yeah, I didn't bother getting into that because I wanted to be concise. Good to point out though. Steve Shipway Steve Shipway 3 3 bronze badges. This is what I was going to say. Some torrents have almost no activity with the port closed.
0コメント