filtering intenet radio

Is there a way to filter internet radio traffic
(something like p2p filter )

Probably not. There’s no “matcher” to automatically identify “audio traffic” (like the p2p matcher you wrote about).
And as many audio streaming solutions can fall back to http, you will probably not be able to completely shut this down.

You could of course deny some well known “real” streaming protocols, like RTSP (which should be port 554 TCP/UDP IIRC). But complete control is probably out of reach :wink:

Best regards,
Christian Meis

To block shoutcast you could look in tcp packets (content) for ICY or whatever their metatag is. Mark the connection then packets.

Sam

there are thousands of internet radio sites and systems, all of them use their own transport method. there is no way of telling whether the traffic contains internet radio. you can just see which sites you like to block, inspect the packets and do as suggested above.

IMO - blocking is a bad idea anyways. if you can - reduce connection speeds so they have to choose net-radio or web :smiling_imp:

No way to drop it… You can detect it based on tcp sessions that’s established for a long period, and has a constant transfer speed.

Not sure whether MT can do this, but you can possibly forcefully close established TCP connections that has been established longer than, say 2 hours.

Problem with this, is that 1) You can kill someone’s http download if he’s been downloading more than 2 hours on a file, and 2) some of these audio streams also use UDP, which is connection less, and even harder to track…

Moral of the story, don’t block it. High bandwidth applications aren’t your enemy, abusive users are..

Don’t say no way - because there’s always a way.

/ip firewall mangle
add chain=prerouting protocol=tcp tcp-flags=psh,ack content=“ICY 200 OK”
action=add-src-to-address-list address-list=shoutcast
address-list-timeout=1d comment=“Shoutcast Matcher” disabled=no

This will add any radio station IPs that are using ICE/Shoutcast or similiar. You could adapt a few different content=“” entries to pick out windows media player, etc. Each rule adds some overhead as digging into the data content on each packet is cpu intensive. Be careful not to match something like ‘audio/mpeg’ because that might occur in an email or other transport as well.

Sam

And IceCast is the only streaming media format??? hmmm :smiley:

my example was for shoutcast / icecast. I did say that he can adapt others for wmp etc.