Easy - block on known and suspected Ports. :-) Go ahead - the network traffic logs will show whats going on and you'll end up somewhere you don't want to be. We always blocked many wifi subnet ports to keep phones from doing 'bad stuff' cause between android phones and malware you just did NOT...