Go after the servers. This won't mean much when users start using internet proxys. Here is a great link for fighting all P2P apps... http://www.infosecuritymag.com/articles/february01/cover.shtml Also, here is a cool paper on the internals of Gnutella. Have fun. -- Nigel Clarke Network Security Engineer FOREVER NETWORKS -----Original Message----- From: netfilter-admin@lists.netfilter.org [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Raymond Leach Sent: Sunday, December 01, 2002 9:27 PM To: Netfilter Mailing List Subject: MSN Messenger ... Hi All Is there a way to block MSN messenger just using iptables, or do I also need to use something like squidguard to block the message servers? Is MSN messenger capable of HTTP tunneling through proxies? Ray -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ( Raymond Leach ) ) Knowledge Factory ( ( ) ) Tel: +27 11 445 8100 ( ( Fax: +27 11 445 8101 ) ) ( ( http://www.knowledgefactory.co.za/ ) ) http://www.saptg.co.za/ ( ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ o o o o .--. .--. | o_o| |o_o | | \_:| |:_/ | / / \\ // \ \ ( | |) (| | ) /`\_ _/'\ /'\_ _/`\ \___)=(___/ \___)=(___/