Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 1330 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Http proxy and Internet Radio stream problem

WaMaR
I have problem with http proxy.

 

My Connection Tracking Table:
tcp      6 431999 ESTABLISHED src=212.160.118.xxx dst=217.11.251.151 sport=59079 dport=80 src=217.11.251.151 dst=212.160.118.xxx sport=80 dport=59079 [ASSURED] use=1 
tcp      6 431999 ESTABLISHED src=212.160.118.xxx dst=217.11.251.151 sport=33175 dport=80 src=217.11.251.151 dst=212.160.118.xxx sport=80 dport=33175 [ASSURED] use=1 
tcp      6 431999 ESTABLISHED src=212.160.118.xxx dst=217.11.251.151 sport=51749 dport=80 src=217.11.251.151 dst=212.160.118.xxx sport=80 dport=51749 [ASSURED] use=1 

inetnum:      217.11.251.144 - 217.11.251.159
netname:      ABRADIO-CZ
descr:        Inernet radio
country:      CZ


Probably, some user run WMP with Internet Radio, but although computer has switched off http proxy still download stream.
When I restart http proxy it helps on moments only 

How can I fix this problem?
Maybe "Block CONNECT Method" or "Strict TCP Session Handling" but maybe this metod too much restrictive?


This thread was automatically locked due to age.
Parents
  • 0
    if you ahve an ips license have it block p2p..that should take care of p2p clients.  HOwever realplayer and WMP will both goto connect on port 80 if they are blocked..the best way to kill them is block connect method.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0
    if you ahve an ips license have it block p2p..that should take care of p2p clients.  HOwever realplayer and WMP will both goto connect on port 80 if they are blocked..the best way to kill them is block connect method.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data