which ports to block on router ?

[lordsmurf]

From what I can see, I am able to block certain ports using the router.

People here, on my network, are becoming quite obnoxious with IRC, Yahoo chat, Kazaa downloads, etc. It sucks up all the bandwidth from the things the broadband was intended for .. not to mention I DO NOT approve of some of it (though luckily none of it is music, so RIAA can bite me).

What ports do I need to block to keep this crap traffic to a minimum (or altogether gone for good)?

[DJRumpy]

Depending on how strict you want to be, and I remember correctly, you can block all ports above 1023. All ports below that are reserved, but all ports above that are for 3rd party applications like chat, irc, Kazaa, etc.

Ports below that are more problematic, as you could interfere with mail, news, DHCP, etc.

It's a good stance to take if you want to eliminate unecessary traffic. Just be prepared for a slew of complaints. Typically you would then unblock only those ports approved for use.

The full list of well known ports can be found here:
http://www.iana.org/assignments/port-numbers

[lordsmurf]

That's exactly what I've done. Works perfectly.

I did however have to open open the 3000 range for FTP transfer access to my many sites.

The people that complain can bite me.

Also did UDP 80 to block out chat.

[thayne]

You suck! Just get more bandwidth!

[Faustus]

I just block everything, but not full stealth. Then open up specific ports I need and forward them to the computer thats going to be using them by Mac address.

[mujahid7ia]

That's exactly what I've done. Works perfectly.

I did however have to open open the 3000 range for FTP transfer access to my many sites.

The people that complain can bite me.

Also did UDP 80 to block out chat.

Most software, p2p, IM, etc., can be configured to use any ports, including that 3000 port range...

[SquirrelDip]

I have to agree with Flaystus - block all and open up what you need...