I had this same problem and realized that other servers on those nets provided news articles that some of my users wanted to read. I feel like Corp America should ask Yahoo to publish a list of servers used to support Instant Messaging. Actually MSN and AOL should do the same. Just my 2 cents. Thanks, Preston -----Original Message----- From: Rob Sterenborg [mailto:rsterenborg@xs4all.nl] Sent: Wednesday, February 26, 2003 8:50 AM To: netfilter@lists.netfilter.org Subject: RE: block yahoo messenger > hi all, > does anyone have an idea about blocking "yahoo messenger" > using iptables? thanks afshin Maybe it's quite rude to block 4 /24 nets, but Messenger kept connecting in these ranges and on different ports (5050, 23, 80) so I just did this : iptables -A FORWARD -d 216.136.223.0/24 -j REJECT --reject-with tcp-reset iptables -A FORWARD -d 216.136.224.0/24 -j REJECT --reject-with tcp-reset iptables -A FORWARD -d 216.136.227.0/24 -j REJECT --reject-with tcp-reset iptables -A FORWARD -d 216.136.233.0/24 -j REJECT --reject-with tcp-reset Of course you are welcome to find out exactly what servers Messenger using to block them individually ; I didn't take the time to do that. Gr, Rob
