Re: rules for skype

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Skype is able of connect using squid throw HTTPS connections, which makes it harder to block using squid ACLs, as when HTTPS is used, squid sees nothing only the hostname that you're connecting and NOT the whole URL.



Sincerily, Leonardo Rodrigues


Seferovic Edvin escreveu:

DEVIL_MODE = 1;
You can stop it by blocking incoming high ports ;)


DEVIL_MODE = 0;
Why should you block all incoming high ports? Hm.. maybe you want to allow
only web traffic that comes and goes through a squid proxy ;)

Regards,

Edvin Seferovic

-----Original Message-----
From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Taylor, Grant
Sent: Montag, 02. Mai 2005 00:00
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Re: rules for skype



iptables -A FORWARD -p tcp --dport SKYPEPORT -j ACCEPT



<devilish @^*% eating grin> He, Skype does not have a port (per say). </devilish @^*% eating grin>

Skype will use just about any port that it can use (all the standards you
would think for internet traffic) to connect to any ""super node that it can
connect to.  unfortunately what qualifies as a Super Node is any node /
computer that is running Skype that is directly connected to the internet
with out a firewall that would inhibit other systems from connecting
directly to it.  Do a Google for "Skype Protocol" and see what you find.  I
have a PDF on it at the office that I'd be happy to send you.  (If you want
this PDF I'll find the URL to it and post it to the list or email
individually as I don't think the list would like a PDF sent to it.)  The
only way that I've heard to even slow down Skype is to force it to pass
through a proxy, beyond that nothing, that I have heard of or read about,
will stop it.



Grant. . . .







[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux