From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Lawrence Tang" Subject: Block MSN Messenger & Yahoo Messenger Date: Thu, 11 Dec 2003 10:43:28 +1000 Sender: netfilter-admin@lists.netfilter.org Message-ID: <01a301c3bf7f$cb941fe0$7700000a@lawrencewin2k> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_019E_01C3BFD3.9C8BFB10" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Netfilter This is a multi-part message in MIME format. ------=_NextPart_000_019E_01C3BFD3.9C8BFB10 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, I have an RH9 with NAT access for the client. I would like to block = MSN & Yahoo messenger from the client to access. Can any body advice me ? Thanks in advance. Best Regards, =20 Lawrence Tang=20 ------=_NextPart_000_019E_01C3BFD3.9C8BFB10 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Hi,

I have an RH9 with = NAT access=20 for the client. I would like to block MSN & Yahoo messenger from the = client=20 to access.

Can any body advice = me ? Thanks=20 in advance.

Best Regards,

Lawrence = Tang=20

------=_NextPart_000_019E_01C3BFD3.9C8BFB10-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joel Newkirk Subject: Re: Block MSN Messenger & Yahoo Messenger Date: Thu, 11 Dec 2003 00:25:06 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1071120305.2091.535.camel@alpha.newkirk.us> References: <01a301c3bf7f$cb941fe0$7700000a@lawrencewin2k> Reply-To: firewalldude@newkirk.us Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <01a301c3bf7f$cb941fe0$7700000a@lawrencewin2k> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Lawrence Tang Cc: Netfilter On Wed, 2003-12-10 at 19:43, Lawrence Tang wrote: > Hi, > I have an RH9 with NAT access for the client. I would like to > block MSN & Yahoo messenger from the client to access. > Can any body advice me ? Thanks in advance. > > Best Regards, > > Lawrence Tang For MSN I've successfully used these three rules: iptables -A FORWARD -p tcp --dport 1863 -j DROP iptables -A FORWARD -d 207.46.110.0/25 -j DROP iptables -A FORWARD -d 207.46.104.20 -j DROP For Yahoo IM, you need to block access to ALL servers. The list below is probably no longer complete, if it ever was, but: /sbin/iptables -A FORWARD -d 63.216.136.22 -j DROP /sbin/iptables -A FORWARD -d 66.135.224.142 -j DROP /sbin/iptables -A FORWARD -d 66.136.175.132 -j DROP /sbin/iptables -A FORWARD -d 66.163.168.105 -j DROP /sbin/iptables -A FORWARD -d 66.163.172.117 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.76 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.77 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.78 -j DROP /sbin/iptables -A FORWARD -d 66.163.173.203 -j DROP /sbin/iptables -A FORWARD -d 66.163.175.128 -j DROP /sbin/iptables -A FORWARD -d 66.163.178.78 -j DROP /sbin/iptables -A FORWARD -d 204.71.200.36 -j DROP /sbin/iptables -A FORWARD -d 204.71.200.37 -j DROP /sbin/iptables -A FORWARD -d 204.71.201.134 -j DROP /sbin/iptables -A FORWARD -d 204.71.201.141 -j DROP /sbin/iptables -A FORWARD -d 216.136.173.172 -j DROP /sbin/iptables -A FORWARD -d 216.136.173.179 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.132 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.142 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.143 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.144 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.145 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.145 -j DROP /sbin/iptables -A FORWARD -d 216.136.175.226 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.134 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.142 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.213 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.213 -j DROP /sbin/iptables -A FORWARD -d 216.136.224.214 -j DROP /sbin/iptables -A FORWARD -d 216.136.225.12 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.117 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.118 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.209 -j DROP /sbin/iptables -A FORWARD -d 216.136.226.210 -j DROP /sbin/iptables -A FORWARD -d 216.136.227.168 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.129 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.130 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.131 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.133 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.135 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.148 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.151 -j DROP /sbin/iptables -A FORWARD -d 216.136.233.152 -j DROP j From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Gale Subject: Re: Block MSN Messenger & Yahoo Messenger Date: Thu, 11 Dec 2003 16:45:42 -0700 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20031211164542.354fe701.mgale@utilitran.com> References: <01a301c3bf7f$cb941fe0$7700000a@lawrencewin2k> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <01a301c3bf7f$cb941fe0$7700000a@lawrencewin2k> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Hello, Would running squid in transparent mode with no cache :) be able to block MSN and yahoo messenger :) Michael. On Thu, 11 Dec 2003 10:43:28 +1000 "Lawrence Tang" wrote: > Hi, > I have an RH9 with NAT access for the client. I would like to block MSN & Yahoo messenger from the client to access. > Can any body advice me ? Thanks in advance. > > Best Regards, > > Lawrence Tang > -- Michael Gale Network Administrator Utilitran Corporation From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Ian Pollock" Subject: RE: Block MSN Messenger & Yahoo Messenger Date: Fri, 12 Dec 2003 10:02:35 +1000 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: content-class: urn:content-classes:message Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org by using the below rules in your squid.conf will stop msm, not sure = about yahoo but if you check your log and look for the yahoo lookup = entries you could modify these rules to suit yahoo blocking mabye.. -- squid.conf -- acl msnmessenger url_regex -i gateway.dll http_access deny msnmessenger=20 ian -----Original Message----- From: Michael Gale [mailto:mgale@utilitran.com] Sent: Friday, 12 December 2003 9:46 AM To: netfilter@lists.netfilter.org Subject: Re: Block MSN Messenger & Yahoo Messenger Hello, Would running squid in transparent mode with no cache :) be able to = block MSN and yahoo messenger :) Michael. On Thu, 11 Dec 2003 10:43:28 +1000 "Lawrence Tang" wrote: > Hi, > I have an RH9 with NAT access for the client. I would like to = block MSN & Yahoo messenger from the client to access. > Can any body advice me ? Thanks in advance. >=20 > Best Regards, > =20 > Lawrence Tang=20 >=20 --=20 Michael Gale Network Administrator Utilitran Corporation From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Babar Kazmi" Subject: Re: Block MSN Messenger & Yahoo Messenger Date: Fri, 12 Dec 2003 10:19:39 +0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: 7bit To: mgale@utilitran.com, netfilter@lists.netfilter.org

Hello Michael

Yes, You can block ports on Squid.

acl msn_messenger req_mime_type -i "illegal-mime-types.txt"
http_access deny msn_messenger

Regards

Babar Kazmi.

>Hello,

> Would running squid in transparent mode with no cache :) be able to block MSN and yahoo messenger :)

>Michael.

>On Thu, 11 Dec 2003 10:43:28 +1000

>"Lawrence Tang" wrote:

> > Hi,

> > I have an RH9 with NAT access for the client. I would like to block MSN & Yahoo messenger from the client to access.

> > Can any body advice me ? Thanks in advance.

> >

> > Best Regards,

> >

> > Lawrence Tang

> >

>--

>Michael Gale

>Network Administrator

>Utilitran Corporation

STOP MORE SPAM with the new MSN 8 and get 2 months FREE*