Method 1: block the BT port. Everyone knows that if you want to restrict a service, you must set an ACL (Access Control List) on the router to block the port used by the Service, this prevents the service from running properly. for the btsoftware, we can try to seal its port. in general, the btsoftware uses port 6880-6890, and Xiaojin uses the following command on the company's core router
Method 1: block the BT port. Everyone knows that if you want to restrict a service, you must set an ACL (Access Control List) on the router to block the port used by the Service, this prevents the service from running properly. for the btsoftware, we can try to seal its port. in general, the btsoftware uses port 6880-6890, and Xiaojin uses the following command on the company's core router
Method1:BlockBT Port
We all know that if you want to restrict a service, you need to set an ACL (Access Control List) on the vro to block the port used by the Service from normal operation. for the btsoftware, we can try to seal its port. in general, the btsoftware uses port 6880-6890, and Xiaojin uses the following command on the company's core router to add all port 6880-6890
Block.
Access-list 101 deny tcp any range 6880 6890
Access-list 101 deny tcp any range 6880 6890 any
Access-list 101 permit ip any
Enter the corresponding port and enter ip access-group 101 out to make the access control list take effect. After the configuration,
NetworkThe bandwidth will be released immediately,
NetworkThe speed is improved.
However, a few days later
NetworkThe speed slows down again. The port of the btsoftware is clearly blocked. What software is still occupying a large amount of bandwidth? Xiaojin uses SNIFFER to detect that the data traffic on several ports that are not commonly used is very large, in the past, many people used third-party btsoftware (such as BITCOMET and BITCOMET ).
DownloadThese software can customize the port for data transmission and modify it to an unblocked port before performing BT
DownloadNow.
(Note: Due to the large change of the BT port, it is very ineffective to use the ACL to seal the port, and it is difficult to execute multiple configuration entries, in addition, a large number of ACLs also occupy the CPU resources of the router, affecting other services.
Advantage: Access Control List ACL
BlockBT is easier to manage and easily configured. It is more flexible to use and can be very effective through ACL.
BlockOfficial btsoftware)
Method2:BlockBT Server
Since it cannot be effectively performed from the local port
BlockSo we have to start with the remote target address.
DownloadThe local machine must first connect to the remote BT server, slave server
DownloadThe seed list is connected to the corresponding seed, so Xiaojin starts from the major BT forums
DownloadBT seed to obtain the address of the BT server. start BITCOMET and select the Server LIST. On the TRACKER server, you can see the address of the BT server, for example (bt.ydy.com). Then, you can use NUSLOOKUP or PING command to obtain the server address 202.103.X.X.
After obtaining the server address, you can perform this operation on the core server.
Block. Specific command: access-list 102 deny tcp any 202.103.9.83 0.0.0.0
At last, Xiaojin
NetworkRun the ip access-group 102 out command on the egress port to make the access control list take effect, so that the intranet user cannot access this BT server, at the same time, all the BT seeds provided by this server cannot be used. Next, receive more IP addresses of the BT server and add them to control list 102 one by one, after starting third-party btsoftware, the number of connected seeds is 0,
DownloadWhen the speed was 0, I finally breathed a sigh of relief.
It wasn't long before the company appeared again
NetworkThe problem of slow operation was discovered by Xiaojin's monitoring system through BITCOMET.
DownloadAlthough the speed of a movie is not as high as before, it still occupies a considerable amount of bandwidth. Why does it enable users to connect to the BT server? In the past, the IP addresses used in the access list were filtered, once the IP address of the BT server changes
BlockIt's useless.
(Disadvantage: There are many BT servers. Find the IP address of each server and then
BlockIt is very troublesome, and it is easy to miss some servers. The access control list can only be
BlockThe IP address cannot
BlockDomain name, for BT servers with frequent IP addresses,
BlockIt is annoying.
Advantage: This
MethodEffective
BlockFor a large number of BT servers, network administrators can simply Manage Server IP addresses.
BlockDisable the use of the btsoftware, which is very effective for the customized port of the btsoftware
BlockFunction)
Method3: load the PDLM Module
Using the PDLM module produced by CISCO saves us the trouble of configuring routing policies,
BlockThe results are very good.
MethodOne is for the port used by the data packet
Block, One is for the destination address of the Data Packet
Block, Although valid within a certain range, it cannot fully prohibit BT, through the PDLM + N BAR
MethodCome
BlockBT has this problem.
CISCO provides three PDLM modules on its official website: KAZAA2.pdlm and bittorrent. pdlm. emonkey. pdlm.
BlockKAZAA, BT, Donkey. Here we are
BlockBT
DownloadFor example,
Create a TFTP site, copy bittorrent. pdlm to the site, and use the ip address nbar pdlm tftp: // IP address of the TFTP site/bittorrent. pdlm command in the core router to load the bittorrent. pdlm Module
Next, set the router policy. The specific command is as follows:
Class-map match-any bit
// Create a CLASS_MAP named BIT
Match protocol bittorrent
// The module bittorrent standard is required!
Policy-map limit-bit
// Create a POLICY-MAP named LIMIT-BIT
Class bit
// It must comply with the CLASS-MAP defined just now with the BIT name
Drop
// If yes, data packets are lost!
Interface gigabitEthernet0/2
// Enter
NetworkExit that interface
Service-policy input limit-bit
// Enable the LIMIT-BIT routing policy when a packet enters
Service-policy output limit-bit
// Enable the LIMIT-BIT routing policy when data packets are sent out.
If you do not want to manually load bittorrent. pdlm on TFTP every time you start the vro, you can upload the PDLM file to the FLASH of the vro and select the IP address of the TFTP server. The prompt is:
BlockWhen KAZAA or EDONKEY is used, replace bittorrent after "match protocol" with KAZAA2 or edonkey in the vro configuration.
BlockLike BT,
Use NBAR to load the PDLM Module
BlockAfter the btsoftware, Xiaojin has completely cut off the use of BT in the company, and all employees can work with peace of mind,
NetworkThe speed is also restored to the previous stable value,
(Disadvantage: This
MethodIt is relatively difficult to configure, and there are a lot of commands, and the vro must re-specify the PDLM file every time it starts up. If the PDLM file is uploaded to the FLASH of the vro, it will occupy a lot of space.
BlockBtsoftware also occupies a large amount of CPU and memory resources on the vro, which affects the data packet transmission speed.
Advantage:
MethodComplete
BlockBT
Download)
