Napster uses servers to track filenames in the music library directory of customers that are currently online. Then the file is transferred in a Peer to Peer connection. In is very difficult to stop the peer to peer without boxes designed for that purpose. If you are interested in that, see www.infosecuritymag.com for an article on the subject. It was covered in the February 2000 issue of Information Security. For your solution, I would put up an access list denying any traffic to the Napster servers. These IPs should not be too hard to determine. You may try contacting the Cisco TAC for the IPs, as well. Someone there should have the list. At least they did when I worked there. Karl -----Original Message----- From: owner-ascend-users-digest at max.bungi.com [mailto:owner-ascend-users-digest at max.bungi.com] Sent: Thursday, March 01, 2001 1:45 AM To: ascend-users-digest at max.bungi.com Subject: ascend-users-digest V96 #2212 ascend-users-digest Wednesday, 28 February 19101 Volume 96 : Number 2212 In this issue: (ASCEND) Blocking or limiting Napster... (ASCEND) SuperPipe 95 (ASCEND) PipeLine 50 - Can it route/NAT to its Ethernet via two channels a nd two connection profiles simultaneously? ---------------------------------------------------------------------- From: "Darkshot's Lists" <dfl at chudys.com> Date: Wed, 28 Feb 2001 09:21:47 -0500 Subject: (ASCEND) Blocking or limiting Napster... I'm in the process of waiting (and waiting) for fiber to be run so I can upgrade my bandwidth, but am currently stuck with 2 T1's on on PoP here that's being flooded. Since it seems that network usage goes to the wall within 10 minutes of seeing the schoolbuses go by the NOC ,I strongly suspect Napster of being behind this. What I'd like, either using the MAX boxes' filtering capabilities, or something on the Ciscos (2500 series), is to be able to block this traffic completely for a bit to see if the problem goes away. Paradise has a product that's supposed to analyze traffic and tell you what's going on, but my topology won't allow me to use it effectively- plus, it needs to be on a "hub" and I don't have any here. Don't have any vacuum tubes, either. ;-) A search on the web for "Block Napster" returns nothing but tons of material on how to get around such a thing- no clues as to how it is done in the first place. Is anyone on either list doing this, and if so, how? Any information will be greatly appreciated. 'Shot ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq> ------------------------------ From: "Chris West" <chris at westcomm.net> Date: Wed, 28 Feb 2001 12:23:26 -0600 Subject: (ASCEND) SuperPipe 95 Here is what I am trying to do... I am trying to setup a VPN between 3 offices all using SuperPipe 95s. The main office has a server that needs to be reached from the other offices. We are connected via ISDN lines to the public Internet. How do I configure the SuperPipes to do VPN? Since this is not a permanent connection, how does the router know that someone is trying to connect to the server that is behind it and how does the ISDN call get initiated from the outside in? Are there docs somewhere that I can read on this subject? Thanks Chris ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq> ------------------------------ From: "Ben-David, Joe" <Joe.Ben-David at eurekaggn.com> Date: Wed, 28 Feb 2001 16:45:17 -0500 Subject: (ASCEND) PipeLine 50 - Can it route/NAT to its Ethernet via two channels a nd two connection profiles simultaneously? Greetings, A dialin site has one ISDN BRI and a PipeLine 50 dialup router. They need two routable IP addresses, one to provide NAT for the LAN, and one for one-to-one NAT to a server to be resolvable on the Internet. Their ISP can allocate a static IP address, one per username/password. I propose to get two dialin accounts from the ISP, and to administer two connection profiles in the PipeLine, one with each of the username/password pairs. Each profile dialing in will be assigned a static IP address. 1. Can the PipeLine route packets to the Ethernet interface from both active connections, appearing to the Internet as both assigned gateway addresses? - -----------ISDN BRI B1-----------205.209.253.1 | | Pipeline 50 |--205.209.253.254---Ethernet--- 205.209.253.0/24 - -----------ISDN BRI B2-----------205.209.253.2 | 2. Can it NAT for the LAN via one connection profile and do one-to-one NAT on the other simultaneously? - -----------ISDN BRI B1-----------205.209.253.1|>>>NAT>>>| 192.168.20.1 | Pipeline 50 |-----Ethernet - -----------ISDN BRI B2-----------205.209.253.2|>>>NAT>>>| 192.168.20.0/24 Joe Ben-David Sales engineer EurekaGGN jben-david at eurekaggn.com ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq> ------------------------------ End of ascend-users-digest V96 #2212 ************************************ ++ Ascend Users Mailing List Digest++ To unsubscribe: "echo unsubscribe | mail ascend-users-digest-request at bungi.com" To get FAQ'd: <http://www.shore.net/~dreaming/ascend-faq> or <ftp://ftp.shore.net/members/dreaming/ascend-faq.txt> ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq>