Does blocking Rendezvous block iTunes/iPhoto/AFP?

[michaelsanford]

I'm building a gateway and I want to make sure that users on the network can't browse each others' files. iTunes and iPhoto (among other things).

If I block Rendezvous (427) will that also prevent clients finding other iTunes Music Sharing (3689) and iPhoto Sharing (8770) services?

 

[scruffy]

Blocking Rendezvous will prevent the computers automatically discovering services, but they won't prevent anyone actually going out and looking for them (e.g. by port scans).

 

[michaelsanford]

That's whatI thought. But you can't force iTunes or iPhoto to connect to a specific IP anyway, can you? So even if the ports are known by an nmap or nessus they're relatively unreachable in any practical sense (right?)