blocking p2p applications

[Crunch]

Hi,

I have setup untangle application control to block p2p as follows

Application Control: Application, value = Bit Torrent
Application Control: ProtocolChain, value = */BITTORRENT*

However, i still am able to use p2p apps without an issue

Do i have to do anything more to block p2p ?
Thanks

[jcoffin]

Use tarpit instead of block.

[Crunch]

Use tarpit instead of block.

Thanks, i changed blocked to tarpit
However i am still able to torrent.

[jcoffin]

You need to restart the torrent app since existing sessions are not blocked.

[Crunch]

You need to restart the torrent app since existing sessions are not blocked.

Thanks it helped!!

Is there a way to invalidate sessions from untangle ?

[jcoffin]

You could block all the sessions from the source IP in Config -> Network -> Filter Rules for a couple of minutes to force the sessions to restart and have the rules apply.

The reason behind not blocking existing sessions with new rules is a trade off with performance across the UT.

[Crunch]

You could block all the sessions from the source IP in Config -> Network -> Filter Rules for a couple of minutes to force the sessions to restart and have the rules apply.

The reason behind not blocking existing sessions with new rules is a trade off with performance across the UT.

Hi so today i used uTorrent and it seems to be able to download even with tarpit on.

[jcoffin]

Hi so today i used uTorrent and it seems to be able to download even with tarpit on.

Check either the session view to see if the sessions are going through the UTM process (bypass = false), if it is going through the right policy, and if Application Control is labelling it as torrent.

[Crunch]

Check either the session view to see if the sessions are going through the UTM process (bypass = false), if it is going through the right policy, and if Application Control is labelling it as torrent.

I see several TCP connections been made by the torrent application that has ben classified as default policy. bypassed = false

[jcoffin]

What is the Application Control's label on the session (answer is in the session details).

app-control.png