406
Comment:
|
← Revision 4 as of 2009-04-12 17:33:24 ⇥
701
converted to 1.6 markup
|
Deletions are marked like this. | Additions are marked like this. |
Line 6: | Line 6: |
iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp -d 207.46.110.0/24 -j REJECT | iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp -d 207.46.110.0/24 -j REJECT iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp --dport 1863 -j REJECT |
Line 13: | Line 14: |
acl msn_header_req req_mime_type application/x-msn-messenger acl msn_header_rep rep_mime_type application/x-msn-messenger |
|
Line 14: | Line 18: |
http_access deny msn_header_req http_reply_access deny msn_header_rep |
Blocco di MSN Messenger sul firewall
Per bloccare MSN messenger occorre bloccare in toto l'accesso alla rete 207.46.110.0/24.
iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp -d 207.46.110.0/24 -j REJECT iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp --dport 1863 -j REJECT
Oltre al firewall, occorre anche bloccare l'accesso in squid:
acl msn_messenger dst 207.46.110.0/255.255.255.0 acl msn_header_req req_mime_type application/x-msn-messenger acl msn_header_rep rep_mime_type application/x-msn-messenger http_access deny msn_messenger http_access deny msn_header_req http_reply_access deny msn_header_rep