Tineeminee wrote: > Thanks for your all your help I did manage to block MSN by writing >the following commands >/sbin/ipchains -A input -p TCP -b --sport 1863 -j DENY >
It should better be --dport. '-b' is ok but not advisable(as per man page) nor needed. >/sbin/ipchains -A output -p TCP -d 192.168.1.0/24 -s 216.0.0.0/8 23 -l -j DENY again -d should be -s and -s should be -d, logically. Plus I dont think MSN has taken full 216. class, but anyway its fine for you as you are blocking only telnet(port 23). > >Can anyone please let me know if there is any way i can know which ports or >servers are being used by the users on the N/W. man netstat should help to know connection ports. Amish.
