Re: Blocking file type by iptables?

"hare ram" <hareram@xxxxxxxxxx> · Mon, 25 Aug 2003 11:34:38 +0530

Hi

Go to netfilter.org

and you can find Patch-o-matic

hare

  ----- Original Message ----- 
  From: 
  ads nat 
  To: hare ram ; netfilter@xxxxxxxxxxxxxxxxxxx 

  Sent: Monday, August 25, 2003 11:25 
  AM
  Subject: Re: Blocking file type by 
  iptables?

  Please tell me what is POM. I tried blocking url_regen from squid. It has 
  blocked kazza sites but still users are able to down load through search. I 
  have just started learning Iptables, totally new. But by going through mail 
  archieve i think STRING blocking is similer to URL_regen blocking in squid. 

  Thanks 

hare ram <hareram@xxxxxxxxxx> 
  wrote:

    Hi

    If you want to block Kazaa
    use STRING from POM, it will work great 

    hare

      ----- Original Message ----- 
      From: 
      ads nat 

      To: George Vieira ; netfilter@xxxxxxxxxxxxxxxxxxx 

      Sent: Monday, August 25, 2003 8:28 
      AM
      Subject: RE: Blocking file type by 
      iptables?

      Even if you block all ports except 80. Kazza manages to access 
      through port 80. So I don't think this will work.
      Thanks

George Vieira <georgev@xxxxxxxxxxxxxxxxxxxxxx> 
      wrote:

        No because this is a bad idea. not only does the CPU have a bad 
        day goign through every packet sniffing for file extensions but also 
        that other innocent data can get blocked when it shouldn't 
        be..

        1. The only thing you can do is block all outgoing/incoming ports 
        and allow only some (25,80)
        2. Use transparent squid proxy to limit access and get it to use 
        regex expressions on URLs you may also want to 
block.
        3. Block any and all MSN/Kazaa/ICQ servers 
        addresses

        You could also setup a fake primary DNS domain like aol.com and 
        icq.com and point to yourself... this is what I've done for ICQ to stop 
        those damn ADs.. if the clients can't resolve the DNS for those domains 
        then they also can't connect. But then they get smart and put a hosts 
        file in their machine.. ;)

        Thanks,

        ____________________________________________
George Vieira

        Citadel Computer Systems Pty 
        Ltd
        Systems Manager
        georgev AT citadelcomputer DOT com DOT au

        Citadel Computer Systems Pty Ltd

        Phone : +61 2 9955 
        2644
        HelpDesk: +61 2 9955 
        2698
        http://www.citadelcomputer.com.au

        -----Original Message-----
From: ads nat 
        [mailto:adsnat@xxxxxxxxx]
Sent: Monday, August 25, 2003 2:22 
        AM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: 
        Blocking file type by iptables?

        Hi,
        I have gone through mail archives to check whether can be blocked. 
        I also checked squid mailing list. But thre is no definite solution to 
        block kazza file downloads. I would like t know whether using iptables 
        can i block particular type of file. If I block .mpeg, .mp3 files 
        through IPtables then it does not matter from which site file is coming. 
        It will get blocked.
        Any suggestion and solutions.
        Thanks

        Do you Yahoo!?
Yahoo! 
        SiteBuilder - Free, easy-to-use web site design software 

      Do you Yahoo!?
Yahoo! 
      SiteBuilder - Free, easy-to-use web site design 
  software

  Do you Yahoo!?
Yahoo! 
  SiteBuilder - Free, easy-to-use web site design 
software