It would make me nervous too. Plus, I hate when things stop working because then people call me and I have to talk to them :) But if a brand new packet is outbound to 29760, you know it is probably going to a Half Life server (I think that's the port). So wouldn't it be wise to deny that? Specifically it would be UDP 29760, not TCP. Doesn't FTP use TCP when negotiating a connection? - James -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Scott Gifford Sent: Sunday, January 06, 2002 9:45 PM To: James Cc: nanog@merit.edu Subject: Re: Blocking Internet Gaming "James" <james@james-web.net> writes:
What kind of games specifically?
Like online Java games (Bejeweled)? Or games like Quake, Unreal, Tribes etc?
The latter is much easier, just block all traffic to/from the default ports which use them. A quick google would yield what they use. I'll give you a quick hint and say Quake3 is 29760-5 or so and Tribes1/2 is 28000-28005 or so.
Doesn't that cause trouble with occasionally blocking ephemeral ports? If you're not allowing incoming connections of any kind (including non-PASV FTP) it shouldn't matter, but blocking ports above 1024 always makes me nervous... ----ScottG.