Differences between revisions 2 and 3
⇤ ← Revision 2 as of 2007-11-22 17:52:20 →
Size: 612
Editor: Kurgan
Comment:
← Revision 3 as of 2007-11-22 17:56:25 → ⇥
Size: 701
Editor: Kurgan
Comment:
Deletions are marked like this. Additions are marked like this.
Line 6: Line 6:
 iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp -d 207.46.110.0/24 -j REJECT iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp -d 207.46.110.0/24 -j REJECT
iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp --dport 1863 -j REJECT

Blocco di MSN Messenger sul firewall

Per bloccare MSN messenger occorre bloccare in toto l'accesso alla rete 207.46.110.0/24. 

iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp  -d 207.46.110.0/24  -j REJECT
iptables -A FORWARD -i eth0 -o eth2 -m state --state NEW -p tcp --dport 1863   -j REJECT

Oltre al firewall, occorre anche bloccare l'accesso in squid: 

acl msn_messenger dst 207.46.110.0/255.255.255.0
acl msn_header_req    req_mime_type  application/x-msn-messenger
acl msn_header_rep    rep_mime_type  application/x-msn-messenger

http_access deny msn_messenger
http_access deny msn_header_req
http_reply_access deny msn_header_rep

Windows/Msn_Messenger (last edited 2009-04-12 17:33:24 by localhost)