Re: Blocking programs with IPtables

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Friday 30 July 2004 4:04 pm, Steve Wakelin wrote:

> Easiest way is to setup your IMAP server on a different port other than 143
> and then configure Thunderbird to use that port.  Disable access to 143.

Except that Leonardo obviously doesn't trust his users not to surreptitiously 
continue using Outlook when they've been told to use Thunderbird - so he 
doesn't trust them not to configure Outlook to connect to the same port that 
Thunderbird connects to.

Antony.

> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org] On Behalf Of Antony Stone
> Sent: 30 July 2004 15:48
> To: netfilter@lists.netfilter.org
> Subject: Re: Blocking programs with IPtables
>
> On Friday 30 July 2004 3:38 pm, Leonardo Teves wrote:
> > Hi,
> > I´m new in this forum, and i have a little question.
> > Is there a way to block some programs with Iptables?
> > I want to block Microsoft Outlook recovering mail from Imap server.
> > I want to force all users to use Thunderbird as mail client without
> > deinstalling Outlook from every workstation.
> > Is my question clear?
> > Any ideas?
>
> Your question is clear.
>
> This cannot be done with netfilter (because all imap connections look the
> same to netfilter, no matter what client or server software is being used)
>
> I cannot think of another way to do it either, because I would be surprised
> if Outlook sent anything in its connect message to identify itself as
> Outlook (the server end of a connection often does, but the client end
> usually doesn't, except for web browsers).
>
> Sorry - but perhaps someone else here can prove me wrong?
>
> Regards,
>
> Antony.

-- 
"Linux is going to be part of the future. It's going to be like Unix was."

 - Peter Moore, Asia-Pacific general manager, Microsoft

                                                     Please reply to the list;
                                                           please don't CC me.