Can cachepilot block streaming internet radio?

[dwimorberg]

Pretty much as the title suggests, we use a combination of Cachepilot and ISA as supplied by our friendly local authority. I've got cachepilot set up with AD and a blacklist of sites we block the kids from going to. However, thanks to the wonderful world of web proxies we're losing practically all our bandwidth to the kids streaming audio from the likes of last.fm, BBC iplayer and Radio Blog to name but a few.

 

Question is, can I stop the kids from accessing the streaming content from these sites using the pupils blacklist, while still allowing the staff group to access it? I'm not up to scratch with ISA though I suspect it could do the job if I knew how!

 

Any help would be much appreciated on this!

Many thanks,

Michael

[tom_newton]

Probably going to need a few firewall rules, most streaming media is rtsp/rtmp which bypasses any webproxies. You got your firewall nice and nailed down?

 

You could probably use some filetype blocking in cachepilot (dunno if the non-smoothwall version of cachepilot does that?) but that would be belt to firewall's braces. If someone would be kind enough to remind me monday I will try and hunt out a more precise answer

[kmount]

Reminder with or without a brick Tom?

[tom_newton]

Either or

 

The one I was trying to remember is ".asx" - often contains playlist information pointing to "actual" streams. Ditto .pls and .m3u

 

Suggest the obvious should be blocked as well - .ram, for example.

 

Have a look at your filter logs is anything interesting showing up?

If you can lmk what site the kids are using, I can help you work out a generic block for those sort of streams.

[spacehopper]

sorry to jump on someone elses thread but im seeking the answer to a smimilar problem..

 

in that id like to block the bbc radio streaming through our isa 2000 box (soon to be upgraded to isa 2006 in the next couple of months) to stop the kids eating up all the bandwidth.

 

any help much appreciated

[zag]

I think Last.fm uses a different port for streaming its radio so it might be worth making a simple firewall rule for that.

[dwimorberg]

Hi there guys, thanks for your suggestions

 

I'm currently compiling a small list of the kinds of sites the kids are visiting. I've had a go on Cachepilot to block "asx", its spec says you can block by file type but I guess doing it by content type is a bit beyond its capabilities. It does do OU-based URL filtering very nicely though!

 

Our ISA server has a lot of firewall rules that the LEA have put in recently; I very rarely look at the ISA server, it's covered by the LEA's support contract so I just call them if anything stops happening! That said, I can add rules to it if necessary.

 

Tom: If you could lend a hand that'd be great! I know I'm just a n00b on this forum at the mo! I'll get a list to you today (no hurry though!)

 

Cheers,

Michael