On 29 Apr 2003 18:50:04 -0300 Sergio A Lima Jr <sergio@xxxxxxxxxxxxxxx> wrote: > I am have problems with abusive use of the software MS-Messenger. > > How to block in my firewall/gateway this use de software (with ipchains > in kernel 2.2.x) Well you just need to deny or drop the packages that are outputing to the MS-Messenger port, which the default is, if I'm not wrong, 1863 (a google search, program checking, or netstat -a while running MS-Messenger would reveal if this is correct). So with ipchains you would do something like: ipchains -A output -i INTERFACE --dport 1863 -j DENY To avoid problems with possible ephemeral ports assigned to 1863 and breaking your connectivity with something that is not related with messenger. You could use instead deny the messenger server which is messenger.hotmail.com so it would be something like: ipchains -A output -i INTERFACE -s messenger.hotmail.com -j DENY (note: the INTERFACE in both rules will be replace by your network interface) Hope this helps! Regards, P. Abrantes ++++++++++++++++++++++++++++++++++++++++ Computer Science Student @ Instituto Superior Tecnico (http://www.ist.utl.pt) This email fortune cookie: Let's call it an accidental feature. -- Larry Wall ++++++++++++++++++++++++++++++++++++++++ ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@xxxxxxxxxxxxxxxxx with "unsubscribe" in the subject of the message.
