Block Googletalk and all IM

omprakash.nigam · 10-12-2006, 07:52 AM

Hi,

May I know how to total block all the IM using Iptables and squid because my company new policy want me to block all the IM.
For time being i just able to block yahoo and ICQ using iptables and msn using squid. but I unable to block skype and google talk.
I want iptables rule to block all these Googletalk,Skype and etc..
hope some one can help me to solve it or point me the useful link.

thanks.

I want block Googletalk and Skype and other IM on my linux machine by ipables rule...
can anybody help for same....
i want iptables rule for same.....

//moderator.note: posts pruned, merged and added to new thread. Please do not revive stale threads but make your own. Please read the LQ Rules. Please search the forums for your topic as it has been asked many times before.

~=gr3p=~ · 10-12-2006, 09:00 AM

i haven't checked with skype yet but googletalk, yahoo, msn u can block using dansguardian with squid watching:

tail -f /var/log/squid/access

or check with

http://www.safesquid.com/

pavangogineni · 10-18-2006, 01:03 AM

Quote:

Originally Posted by omprakash.nigam

Hi,

May I know how to total block all the IM using Iptables and squid because my company new policy want me to block all the IM.
For time being i just able to block yahoo and ICQ using iptables and msn using squid. but I unable to block skype and google talk.
I want iptables rule to block all these Googletalk,Skype and etc..
hope some one can help me to solve it or point me the useful link.

thanks.

I want block Googletalk and Skype and other IM on my linux machine by ipables rule...
can anybody help for same....
i want iptables rule for same.....

//moderator.note: posts pruned, merged and added to new thread. Please do not revive stale threads but make your own. Please read the LQ Rules. Please search the forums for your topic as it has been asked many times before.

Hi,

I want to know how you blocked yahoo and msn using iptables and squid . I am also trying for it since a long time.
Please help me.
Thanks.

~=gr3p=~ · 10-18-2006, 08:31 AM

forget googletalk,msn,yahoo... that is not hard.. skype is interesting... after trying alot i took help of google and was able to block skype with squid

so bottomline: google is my friend

amitsharma_26 · 10-18-2006, 09:22 AM

Quote:

Originally Posted by pavangogineni

I want to know how you blocked yahoo and msn using iptables and squid . I am also trying for it since a long time.

I am blocking yahoo with this squid code /

Code:

acl Yahoo-Mess dst 24.71.200.68/32 204.71.202.73/32 204.71.200.0/24 204.71.177.35/32 204.71.202.59/32 204.71.202.58/32 216.115.105.214/32 204.71.201.47/32 204.71.201.48/32 216.115.105.215/32 216.136.172.221/32
http_access deny Yahoo-Mess
acl Yahoo-Messs dstdomain .msg.yahoo.com
acl Yahoo-Messs dstdomain pager.yahoo.com
acl Yahoo-Messs dstdomain update.messenger.yahoo.com
acl Yahoo-Messs dstdomain update.pager.yahoo.com
http_access deny Yahoo-Messs

pavangogineni · 10-19-2006, 12:34 AM

Quote:

Originally Posted by amitsharma_26

I am blocking yahoo with this squid code /

Code:

acl Yahoo-Mess dst 24.71.200.68/32 204.71.202.73/32 204.71.200.0/24 204.71.177.35/32 204.71.202.59/32 204.71.202.58/32 216.115.105.214/32 204.71.201.47/32 204.71.201.48/32 216.115.105.215/32 216.136.172.221/32
http_access deny Yahoo-Mess
acl Yahoo-Messs dstdomain .msg.yahoo.com
acl Yahoo-Messs dstdomain pager.yahoo.com
acl Yahoo-Messs dstdomain update.messenger.yahoo.com
acl Yahoo-Messs dstdomain update.pager.yahoo.com
http_access deny Yahoo-Messs

It's not working man.

soumalya · 11-23-2006, 03:30 AM

skypethanks for ur knowledge sharing , but can u plzzzzz tell me how to block skype as well as trillion messenger from squid

amitsharma_26 · 11-24-2006, 11:14 AM

For blocking rediff bol messenger via squid,

Code:

acl rediff-block url_regex gatekeeper.rediff
http_access deny rediff-block

soumalya · 11-26-2006, 09:22 PM

thank for sharing ur knowledge. can u plz tell me to block trillion messenger from squid???????????

amitsharma_26 · 11-27-2006, 05:43 AM

Quote:

Originally Posted by soumalya

thank for sharing ur knowledge. can u plz tell me to block trillion messenger from squid???????????

I havent used trillion messenger yet, give me some time, probably i'll download it tonight & test the way it communicates & then post you the way to block it.

soumalya · 11-28-2006, 01:30 AM

thanks for ur mail again. dont worry take ur time. with this software(trillion)u can us as yahoo, msn and other messenger.

thanks

amitsharma_26 · 12-08-2006, 01:15 PM

Quote:

Originally Posted by pavangogineni

It's not working man.

Then you can use this..(squid code for blocking yahoo messenger)

Code:

acl yahoo url_regex shttp.msg.yahoo.com
http_access deny yahoo

EDIT : But for that to work, you got to make sure that your squid should be the one who's doing the name resolutions.

amitsharma_26 · 12-08-2006, 01:32 PM

Quote:

Originally Posted by soumalya

thanks for ur mail again. dont worry take ur time. with this software(trillion)u can us as yahoo, msn and other messenger.

thanks

Soumalya, what is your network topology ?
How does your client connect to internet, today itself i tried & installed trillion, but for providing you a solution with, i got to know about how does your network looks like.

As earlier said, if you are sitting behind a squid-proxy & squid is the one who's doing the name resolutions, then you can use the method i have described in the last post.

soumalya · 12-09-2006, 12:48 AM

thank for ur suggestion.

i just want to know can i block trillion messegnger by using thi

acl yahoo url_regex shttp.msg.yahoo.com
http_access deny yahoo

thanks.

live_dont_exist · 12-10-2006, 08:00 AM

Basically what is Trillian?? Its just another messenger client which has integrated support of Yahoo/MSN in it. So if you've blocked all traffic going to yahoo/MSN anyway.. Trillian is going to try to connect using Yahoo/MSN protocols which you've blocked and hence will not be able to connect.

Theres no way you can block "Trillian" itself unless you have a firewall on each machine which has program level control like ZOne Alarm or something. If you manage to block the ports on which MSN/Yahoo?Gaim?Gtalk/Trillian/whatever communicate on with these servers on your firewall you should be fine. Blocking 100 instant messengers makes no sense according to me coz there will always be a new one to try.

Do Post back if this doesnt make sense.

Cheers
Arvind