Re: Can be PF block skype?

2009-11-04 Thread Predrag Punosevac
David Taveras wrote: > Can PF be programmed to block skype? Provided we have port 80 > and 443 Opened to the world, and perhaps DNS port too... skype > finds any open port to connect to. It has been discussed earlier. The short answer is yes with a little help http://lists.grok.org.uk/pipermail/

RES: Can be PF block skype?

2009-11-04 Thread Ricardo Augusto de Souza
Excelent answer. Also try blocking skype netblock. -Mensagem original- De: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Em nome de Laurent CARON Enviada em: quarta-feira, 4 de novembro de 2009 18:08 Para: misc@openbsd.org Cc: David Taveras Assunto: Re: Can be PF block skype

Re: Can be PF block skype?

2009-11-04 Thread Mark Romer
Not sure if this is any good, looks like it is opensource though. http://www.lynanda.com/products/software-for-corporations/traffic-filtering/l ynanda-skype-filter Mark 2009/11/4 TomC!E! BodE>C!r > But Cisco can do it on Application layer. I'm not sure about pf, but > last time I read man

Re: Can be PF block skype?

2009-11-04 Thread Tomáš Bodžár
But Cisco can do it on Application layer. I'm not sure about pf, but last time I read man page about pf and pf.conf it wasn't able to do that. I think that there was some post about it on Undeadly too. On Wed, Nov 4, 2009 at 9:21 PM, David Taveras wrote: > Your saying that a skype client can prox

Re: Can be PF block skype?

2009-11-04 Thread Tomáš Bodžár
Skype is crap, but really good in going trough firewalls so if you want to block this and you're company then prepare rules about using of ICT for users and they must sign it. If they break those rules then use sanctions against them. Of course that this will not stop experts. Or if you want to be

Re: Can be PF block skype?

2009-11-04 Thread David Taveras
Your saying that a skype client can proxy itself through another skype client on the same network? In any case, iam sure there must be a way if cisco can do it, pf can. --David On Wed, Nov 4, 2009 at 2:12 PM, Yamidt Henao wrote: > It is impossible, skype application, can connect through other c

Re: Can be PF block skype?

2009-11-04 Thread Han Boetes
David Taveras wrote: > Can PF be programmed to block skype? Provided we have port 80 > and 443 Opened to the world, and perhaps DNS port too... skype > finds any open port to connect to. I don't think so. But if you install snort you can. Google for snort and skype and you'll find quite a few dece

Re: Can be PF block skype?

2009-11-04 Thread Laurent CARON
On 04/11/2009 20:48, David Taveras wrote: Greetings, Can PF be programmed to block skype ? Provided we have port 80 and 443 Opened to the world, and perhaps DNS port too... skype finds any open port to connect to. Regards, David Taveras Hi, Why having your users directly natted to the 'evil

Can be PF block skype?

2009-11-04 Thread David Taveras
Greetings, Can PF be programmed to block skype ? Provided we have port 80 and 443 Opened to the world, and perhaps DNS port too... skype finds any open port to connect to. Regards, David Taveras