This script Block's YM, MSN, BOL!

List overview All Threads
Download

newer

older

[Announce] ayttm

ILUG-Bom IRC Channel

Mohan Cheema

20 Jan 2003 20 Jan '03

6:38 p.m.

Hi all,

I was going through the mailing archive of some site and found the queries regarding blocking yahoo and msn messenger using iptable. There is a small script which I have written to block the yahoo,msn and rediff messenger using iptable. I thought to share it with you all as it might help some one on the list to block them.

u can download the script from http://www.linzsystem.com/iptmess.tgz

Took around a week to compile this huge list of servers and it definitely works

Mohan

-- "...very few phenomena can pull someone out of Deep Hack Mode, with two noted exceptions: being struck by lightning, or worse, your *computer* being struck by lightning." (By Matt Welsh)

Show replies by thread

liloindia

21 Jan 21 Jan

10:12 p.m.

Blocking the Messenger ports is more effective, easy & less work for firewall(iptables). lilo

--- Mohan Cheema mohancheema@softhome.net wrote: > Hi all,

...

I was going through the mailing archive of some site and found the queries regarding blocking yahoo and msn messenger using iptable. There is a small script which I have written to block the yahoo,msn and rediff messenger using iptable. I thought to share it with you all as it might help some one on the list to block them.

u can download the script from http://www.linzsystem.com/iptmess.tgz

Took around a week to compile this huge list of servers and it definitely works

Mohan

-- "...very few phenomena can pull someone out of Deep Hack Mode, with two noted exceptions: being struck by lightning, or worse, your *computer* being struck by lightning." (By Matt Welsh)

-- _______________________________________________

http://mm.ilug-bom.org.in/mailman/listinfo/linuxers

________________________________________________________________________ Missed your favourite TV serial last night? Try the new, Yahoo! TV. visit http://in.tv.yahoo.com

Mohan Cheema

10:31 p.m.

liloindia wrote:

...

Blocking the Messenger ports is more effective, easy & less work for firewall(iptables). lilo

Can you give me list of the ports to be blocked for YM,MSN,BOL! have you tried that out if yes and succeeded than please tell me how? :-/ as far as i know such a solution doesn't work :(

Mohan

-- Once upon a time there was a DOS user who saw Unix, and saw that it was good. After typing cp on his DOS machine at home, he downloaded GNU's unix tools ported to DOS and installed them. He rm'd, cp'd, and mv'd happily for many days, and upon finding elvis, he vi'd and was happy. After a long day at work (on a Unix box) he came home, started editing a file, and couldn't figure out why he couldn't suspend vi (w/ ctrl-z) to do a compile. (By ewt@tipper.oit.unc.edu (Erik Troan)

liloindia

10:56 p.m.

Mohan, AFAIK, you can deny outgoing connection by its TCP/UDP port number.

Here is how you specify the simple firewall rule

----------------------------------------- Rule SrcIP Srcport DstIP DstPort Action -----------------------------------------

Blocking MSN by blocking port 1863 for outgoing connections iptables -A FORWARD -p TCP --dport 1863 -j REJECT

Blocking MSN by IPaddress pool for outgoing connections

iptables -A FORWARD -d 64.4.13.0/24 -j REJECT

I hope you get the idea.....

See this list of Famous Application which you would consider to block

http://www.practicallynetworked.com/sharing/app_port_list.htm

peace lilo

--- Mohan Cheema mohancheema@softhome.net wrote: > liloindia wrote:

...

...
Blocking the Messenger ports is more effective,

easy &

...
less work for firewall(iptables). lilo

Can you give me list of the ports to be blocked for YM,MSN,BOL! have you tried that out if yes and succeeded than please tell me how? :-/ as far as i know such a solution doesn't work :(

________________________________________________________________________ Missed your favourite TV serial last night? Try the new, Yahoo! TV. visit http://in.tv.yahoo.com

Philip S Tellis

22 Jan 22 Jan

1:12 a.m.

On Tue, 21 Jan 2003, liloindia wrote:

...

Blocking the Messenger ports is more effective, easy &

yahoo messenger connects on ports 5050, 23, 25, and 80. Are you going to block all of those?

-- In just seven days, I can make you a man! -- The Rocky Horror Picture Show

liloindia

2:49 a.m.

oh yes why not. but in this case we can specify destination network address. regards lilo

...

yahoo messenger connects on ports 5050, 23, 25, and 80. Are you going to block all of those?

________________________________________________________________________ Missed your favourite TV serial last night? Try the new, Yahoo! TV. visit http://in.tv.yahoo.com

Philip S Tellis

4:36 p.m.

On Tue, 21 Jan 2003, liloindia wrote:

...

but in this case we can specify destination network address.

don't top post.

yahoo has networks all around the world - with different subnets. are you going to add all of them? how do you find out all their addresses?

Philip

-- Let the worthy citizens of Chicago get their liquor the best way they can. I'm sick of the job. It's a thankless one and full of grief. -- Al Capone

7788

Age (days ago)

7790

Last active (days ago)

linuxers@mm.ilug-bom.org.in

6 comments

3 participants

tags (0)

participants (3)

liloindia
Mohan Cheema
Philip S Tellis