atau mungkin dengan cara :

See here:

#######################
# Block ICQ/AIM traffic
block out log quick from any to any port = 5190
block in  log quick from any to any port = 5190

# It appears that AIM will use 13, 23, 80, 113, etc.
# But let the DNS server see AOL's DNS first
pass  out     quick from <Internal DNS>/32 to 205.188.0.0/16 port = 53

#Try to send web through squid, but block AIM
block out log quick from any to 64.12.0.0/16 port != 80
block out log quick from any to 205.188.0.0/16 port != 80
#######################

Works pretty well. Note that there's no way for https traffic to get
through. I let the DNS server out so my logs have human-readable names for
the AOL servers. Yay, no more AIM.

Yahoo! Messenger I'm still working on. I have a similar ruleset:

#######################
# Block Yahoo Pager too
# Let web traffic through on 80, Squid should stop non-http traffic
block out log quick from any to any port = 5050
block in  log quick from any to any port = 5050
block out log quick from any to 216.136.128.0/17 port != 80
#######################


mau lengkapnya liat di http://www.shockley.net/ipf-block-aim.asp

Farhat.

-----Original Message-----
From: Asfihani [mailto:[EMAIL PROTECTED]
Sent: 31 Juli 2003 15:02
To: [EMAIL PROTECTED]; defanged
Subject: Re: [linux-admin] Cara ngeblock ICQ ?


On Thu, Jul 31, 2003 at 02:34:40PM +0700, defanged wrote:

> Pak Admin,
> gimana ya cara ngeblock user yang bandel dengan proxy squid yang
> menggunakan ICQ ?

coba seperti ini :

acl ICQ_ports port 5190
http_access deny CONNECT ICQ_ports

atau kalau mau lebih ekstrim
http://www.mail-archive.com/[EMAIL PROTECTED]/msg07360.html
tinggal diganti beberapa bagian

> Kalo dengan ip tables apakah memungkinkan ?

bisa juga, silakan diblok port 5190/tcp

Reff: http://www.icq.com/icqtour/firewall/netadmin.html

salam,
--
Asfihani - http://people.cakraweb.com/~asfik


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Kirim email ke