No
because this is a bad idea. not only does the CPU have a bad day goign through
every packet sniffing for file extensions but also that other innocent data can
get blocked when it shouldn't be..
1. The
only thing you can do is block all outgoing/incoming ports and allow only some
(25,80)
2. Use
transparent squid proxy to limit access and get it to use regex expressions on
URLs you may also want to block.
3.
Block any and all MSN/Kazaa/ICQ servers addresses
You
could also setup a fake primary DNS domain like aol.com and icq.com and point to
yourself... this is what I've done for ICQ to stop those damn ADs.. if the
clients can't resolve the DNS for those domains then they also can't connect.
But then they get smart and put a hosts file in their machine..
;)
Thanks,
George Vieira
Citadel Computer Systems Pty Ltd
-----Original Message-----
From: ads nat [mailto:adsnat@xxxxxxxxx]
Sent: Monday, August 25, 2003 2:22 AM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Blocking file type by iptables?
From: ads nat [mailto:adsnat@xxxxxxxxx]
Sent: Monday, August 25, 2003 2:22 AM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Blocking file type by iptables?
Hi,
I have gone through mail archives to check whether can be blocked. I also
checked squid mailing list. But thre is no definite solution to block kazza file
downloads. I would like t know whether using iptables can i block particular
type of file. If I block .mpeg, .mp3 files through IPtables then it does not
matter from which site file is coming. It will get blocked.
Any suggestion and solutions.
Thanks
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
