Ricardo,
ufdbGuard is a URL redirector for Squid.
Its main purpose is URL filtering and it is also capable
of filtering Skype the way that you want.
Skype uses direct communication (blocked by your firewall),
HTTP [proxy] (blocked by Squid since Skype does not obey HTTP protocol)
and HTTPS [proxy] to communicate with other Skype nodes.
To block the use of a HTTPS proxy you need to configure ufdbGuard to
- configure a whitelist to allow traffic to your own web servers
- block HTTPS traffic for non-FQDN
Marcus
Riccardo Castellani wrote:
I'm reading about method to block users for using Skype, can you confirm
unique way is to deny access directly to all IP address when method
'connect' (SSL) is used ?
In this way people cannot access directly to specific site using IP
instead FQDN !
Can I restrict Skype access in another way to avoid this behaviour ?
