Re: How to block MSN messenger?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



blocking destination port 1863 you don't block all msn conections, you must be filter http conections, that have special mime-type called "application/x-msn-messenger"
(i don't remenber if just ), for this, you can use iptables string match (i don't be secure) or you can use Squid as transparent proxy for outgoing http conections (i be secure)
example of block of MSN with Squid (this block only http conections from MSN)


acl mi_intranet src 192.168.1.0/255.255.255.0
acl msn req_mime_type -i ^application/x-msn-messenger
http_access deny mi_intranet msn
http_access allow mi_intranet


with this and block dport 1863 you are with all right


Sorry for my bad English
Best Regards
Miguel



Michael Gale writes:



Make the wbe only accessible through squid and use a access rule that blocks
gateway.dll request.


Michael.


On Wed, 19 May 2004 15:45:32 -0500
Kenneth Andresen <kenneth@xxxxxxxxxx> wrote:


Hello all,

I need to block MSN instant messenger, but so far without any luck.

Anyone having a good iptable rule to stop MSN Instant Messenger to be
allowed through our server?


Best regards,

Kenneth








--
Michael Gale
Network Administrator
Utilitran Corporation





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux