[ILUG] Iptables & Kazaa

[John Molohan]

Hello all,

I'm trying to block off kazaa on our network here and a quick google
suggested blocking port 1214 would do the trick. So with some limited
knowledge of iptables (1.2.5) I stuck in these rules:

iptables --protocol tcp -A FORWARD --dport 1214 -j REJECT iptables
--protocol tcp -A FORWARD --sport 1214 -j REJECT

Doesn't seem to do much though, cat /proc/net/ip_conntrack still shows
connections established. Iptables -L shows:
REJECT     tcp  --  anywhere             anywhere           tcp
spt:kazaa reject-with icmp-port-unreachable
REJECT     tcp  --  anywhere             anywhere           tcp
dpt:kazaa reject-with icmp-port-unreachable

I'm sure I'm missing something obvious. Any pointers appreciated.

Johnm.