From mboxrd@z Thu Jan  1 00:00:00 1970
From: Askar Ali Khan <askarali@gmail.com>
Subject: Re: Blocking IMs
Date: Thu, 5 Aug 2004 12:12:57 +0500
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <a0f69e5040805001238287a2a@mail.gmail.com>
References: <20040805060738.87455.qmail@web8308.mail.in.yahoo.com>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <20040805060738.87455.qmail@web8308.mail.in.yahoo.com>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: g_sameer75@yahoo.com
Cc: netfilter <netfilter@lists.netfilter.org>

Hi,

If you are running a route/firewall then you have to do things in
FORWARD that is...

## Droping all yahoo related ports voice, messaging, gaming
iptables -I FORWARD -o ppp0 -s IpOfClient -p tcp -m multiport --dport
5000,5001,5100,5050,11999 -j DROP

# Replace -o ppp0 with your out interface, if you have different then ppp0 
  for example -o eth0

##Droping MSN packets
iptables -I FORWARD -o ppp0 -s IpOfClient -p tcp --dport 1836

However if you are doing some transparent proxing, for example if you
are running squid on the same machine that is the firewall/router
machine then replace FORWARD with OUTPUT

iptables -I OUTPUT -o ppp0 -s IpOfClient -p tcp -m multiport --dport
5000,5001,5100,5050,11999 -j DROP

##Droping MSN packets
iptables -I OUTPUT -o ppp0 -s IpOfClient -p tcp --dport 1836

Regards
Askar

On Thu, 5 Aug 2004 07:07:38 +0100 (BST), Sameer Gurung
<sameersworld@yahoo.co.in> wrote:
> IS there a way i can block yahoo chat and instant
> messenger and msn from only specific clients from the
> network..... the clients get their ip address from a
> dhcp server....
> Any help would be appreciated
> 
> =====
> 
> 
> ________________________________________________________________________
> Yahoo! India Matrimony: Find your life partner online
> Go to: http://yahoo.shaadi.com/india-matrimony
> 
>