blocking MSN using iptables?

systemgsr · 12-04-2001, 01:09 AM

I've been trying to block this allday. I'm not sure if my syntax is wrong or what. This is my first attempt to iptables. I used to use ipchains but never set it up to block MSN. Anybody have the exact syntax for blocking msn messanger? thanks.

DJFauß · 12-04-2001, 11:38 AM

Just close the port MSN uses ...

theFuzzyOne · 12-05-2001, 10:08 AM

use netstat in your windoze machine while MSN is running to see all the ports it uses... on mine it's port 1863

so start with something like

iptables -A FORWARD -p tcp --dport 1863 -d 0/0 -j DROP

(add INPUT and OUTPUT rules as needed)

i believe MSN uses different ports for voice and file transfers... 6891 - 6900 for files, i think.

hope this helps a little

izy · 01-25-2002, 05:57 AM

hello !

i got a weird problem, i installed a firewall between my asdl connection and my standalone workstation. before installing the firewall, i was able to voice speak with friend, now it gets stuck : ETABLISHING CONNECTION WITH xxxx but doesnt work, any1 got some iptables rules that make MSN voice chat work behind a firewall ...?

thanx for the help, i'll really appreciate it

i'mma running a REDHAT 7.2

eduac · 07-17-2003, 08:33 AM

exist any possibility to block the msn per user?, because i wanna to block a few users and not the all users.

Hangdog42 · 07-17-2003, 09:32 AM

You can block the MSN ports for individual machines with iptables using either the IP address, or the mac address if they are on your LAN. However, iptables isn't capable of blocking individual users AFAIK.

eduac · 07-17-2003, 09:50 AM

how i can make this? with the iptables command?

such like this?

iptables -A FORWARD -p tcp --dport 1863 -d 0/0 -j DROP

Hangdog42 · 07-17-2003, 12:22 PM

That should probably work. I don't think you need the -d 0/0 though.

eduac · 07-17-2003, 12:28 PM

forget my friend, the kernel version is too old, i think that i must have to use the ipchains.

hakcenter · 07-17-2003, 01:44 PM

you could do a simpler thing, install a proxy, configure the chains for it to be transparent, so the users dont know, and then just straight out disable forwarding..

leonardox · 07-17-2003, 11:29 PM

I'm block messenger.msn.com, loginnet.passport.com and hotmail.com, but you can use in shell the command host hotmail.com or wherever you want and give you the IPS.

iptables -A FORWARD -s IP/NET -d host -j DROP

eduac · 09-04-2003, 09:13 AM

can i block msn using ipchains? but for particulary ip on my network (192.168.66...)?

hakcenter · 09-04-2003, 10:59 AM

Of course you'll get the ips, thats DNS, lol

And you can block msn per station, block the ports its requesting

iptables -A FORWARD -t udp/tcp whatever one it is
-p 100-1000 whatever ports -j DROP

eduac · 09-04-2003, 11:06 AM

so, it is something like that???

ipchains -A FORWARD -t udp/tcp 192.168.66.158 -p 1863 -i DROP

hakcenter · 09-04-2003, 11:25 AM

ipchains -A FORWARD -t tcp -s 192.168.66.158 -p 1863 -j DROP