Blocking Bittorrent

[u10723]

I have setup two rules for blocking bittorrent on a particular zone.  First rule is set to Deny Trust to Untrust using an application filter built with P2P applications.  Second rule is set to Deny Untrust to Trust using the same application filter. 

I am able to block any uploading content, but the filter doesn't block any torrents from downloading. 

From the trust side, i also have a URL filter setup to block P2P websites.  So if a user starts a bittorrent session, then brings the torrent to our network then the session will download fine, but not upload. 

Any suggestions on how to fix this?

[mharding]

This might help:

[u10723]

Yeah I've read through that, but still unable to deny traffic to bittorrent. 

[essnet]

hello,

download a .torrent file is not doing peer to peer, it's like downloading a .doc , it's nothing armful.

[u10723]

but opening that .torrent file and downloading a copyrighted product is harmful. 

[mikand]

Not necessary... even GPL stuff is copyrighted but the license allows you to spread the product.

[mharding]

I wouldn't be too concerned abut .torrent files. A lot of pirating communities (the big one) have switched to magnet links.

http://en.wikipedia.org/wiki/Magnet_URI_scheme

[essnet]

torrent file is armless : it doesn't contain any dangerous material.

feed it to a torrent client downloader and it will start downloading the real file. This is what PA can block : torrent client traffic.

[u10723]

Thank you for your comments, but if you re-read my initial post you will see that I am trying to block torrent client traffic. 

[mikand]

How are your downloads being identified as by the traffic log then?

Perhaps you have some other previous rule in your ruleset that incorrectly allows the traffic?

[essnet]

Ok,

So first question is : in  traffic logs, do you see torrent traffic ? If yes, look at the rule name that allowed that traffic and fix it.

[u10723]

my rulleset is setup by:

RULE1 - untrsut to trust DENY P2P

RULE2 - trust to untrust DENY P2P

RULE3 - trust to untrust ALLOW ALL - Filter AV/Malware/URL

I see bittorrent traffic being denied on RULE2 (going out) but no P2P traffic being blocked on RULE1 (coming in). 

[u10723]

Works great if the torrent is attempted to be started inside the network, but if the tracker is reached and peers connected before bringing the device insde then it will not deny.

[essnet]

unless you have a rule that allows Untrust to Trust application = ANY , no it won't pass ....

[u10723]

That doesn't explain why I can still download torrents.  If you read the post above my rules are set in a fashion to deny torrent traffic both in and out, but this doesn't seem to be working properly.