From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Voltaire Pascual" Subject: Filtering Yahoo Messenger Port Date: Mon, 5 May 2003 08:44:23 +0800 Sender: netfilter-admin@lists.netfilter.org Message-ID: <006e01c3129f$79061e50$6400a8c0@homes> Reply-To: "Voltaire Pascual" Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_006B_01C312E2.870311A0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_006B_01C312E2.870311A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi there... got one newbie question here. Just wondering how can i block = yahoo messenger port using IP tables in my box. Clients using YM is = behind this box. YM is using all possible ports even port 80. TIA /Voltaire ------=_NextPart_000_006B_01C312E2.870311A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi there... got one newbie question = here.=20 Just wondering how can i block = yahoo=20 messenger port using IP tables in my box. Clients using YM is behind = this box.=20  YM is using all possible ports even port 80.
 
TIA
/Voltaire
------=_NextPart_000_006B_01C312E2.870311A0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Julius Wijaya" Subject: Re: Filtering Yahoo Messenger Port Date: Mon, 05 May 2003 09:01:56 +0700 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200305050901560778.000A7D6C@smtp.nikonbw.com> References: <006e01c3129f$79061e50$6400a8c0@homes> Reply-To: wijayaj@gmx.net Content-Type: text/plain; charset="us-ascii" Return-path: In-Reply-To: <006e01c3129f$79061e50$6400a8c0@homes> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit To: Voltaire Pascual , netfilter@lists.netfilter.org just block all the connection to yahoo msg server: scs-fooa.yahoo.com scs-foob.yahoo.com scs-fooc.yahoo.com scs-food.yahoo.com scs-fooe.yahoo.com scs-foof.yahoo.com that is the list I got so far, I am rejecting the connection to those servers after my DNS chain rules so when we put the servers name instead of ip address, it can resolve all the ip address to that server. if you just want to block certain range of ip from the LAN, check the lates patch-o-matic for iptables. http://www.netfilter.org/ regards. JW *********** REPLY SEPARATOR *********** On 05/05/2003 at 8:44 AM Voltaire Pascual wrote: >Hi there... got one newbie question here. Just wondering how can i block >yahoo messenger port using IP tables in my box. Clients using YM is behind >this box. YM is using all possible ports even port 80. > >TIA >/Voltaire From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Subject: Re: Filtering Yahoo Messenger Port Date: Sun, 4 May 2003 19:07:22 -0700 (PDT) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030505020722.9147.qmail@web13508.mail.yahoo.com> References: <006e01c3129f$79061e50$6400a8c0@homes> Mime-Version: 1.0 Return-path: In-Reply-To: <006e01c3129f$79061e50$6400a8c0@homes> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Voltaire Pascual , netfilter@lists.netfilter.org try blocking a certain destination.. ie i use scs.yahoo.com to connect to yahoo messenger, there may be more out there, but just drop any packets that may be trying to goto that destination. --- Voltaire Pascual wrote: > Hi there... got one newbie question here. Just > wondering how can i block yahoo messenger port using > IP tables in my box. Clients using YM is behind this > box. YM is using all possible ports even port 80. > > TIA > /Voltaire __________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joel Newkirk Subject: Re: Filtering Yahoo Messenger Port Date: 04 May 2003 22:59:19 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1052103558.32510.24.camel@alpha.newkirk.us> References: <006e01c3129f$79061e50$6400a8c0@homes> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <006e01c3129f$79061e50$6400a8c0@homes> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Voltaire Pascual Cc: netfilter@lists.netfilter.org On Sun, 2003-05-04 at 20:44, Voltaire Pascual wrote: > Hi there... got one newbie question here. Just wondering how can > i block yahoo messenger port using IP tables in my box. Clients using > YM is behind this box. YM is using all possible ports even port 80. > > TIA > /Voltaire IIRC I collected this data from two different locations, honestly can't attribute proper credit now. /sbin/iptables -A FORWARD -d 63.216.136.22 -j DROP /sbin/iptables -A FORWARD -d 66.135.224.142 -j DROP /sbin/iptables -A FORWARD -d 66.136.175.132 -j DROP /sbin/iptables -A FORWARD -d 66.163.168.105 -j DROP /sbin/iptables -A FORWARD -d 66.163.172.117 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.76 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.77 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.78 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.203 -j DROP /sbin/iptables -A FORWARD -d 66.163.175.128 -j DROP /sbin/iptables -A FORWARD -d 66.163.178.78 -j DROP /sbin/iptables -A FORWARD -d 204.71.200.36 -j DROP /sbin/iptables -A FORWARD -d 204.71.200.37 -j DROP /sbin/iptables -A FORWARD -d 204.71.201.134 -j DROP /sbin/iptables -A FORWARD -d 204.71.201.141 -j DROP /sbin/iptables -A FORWARD -d 216.136.173.172 -j DROP /sbin/iptables -A FORWARD -d 216.136.173.179 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.132 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.142 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.143 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.144 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.145 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.145 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.226 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.134 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.142 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.213 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.213 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.214 -j DROP /sbin/iptables -A FORWARD -d 216.136.225.12 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.117 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.118 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.209 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.210 -j DROP /sbin/iptables -A FORWARD -d 216.136.227.168 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.129 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.130 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.131 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.133 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.135 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.148 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.151 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.152 -j DROP j