My apologies to Chris for neglecting the possibility of blocking IM via ipchains. A comment on that approach: though doable, you will have to research what ports the IM clients can support. My AIM client, for instance, has an "autoconfigure" option which will search for an open port or else set up for http proxy if the default port is blocked.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mr. Adam ALLEN. Sent: Thursday, June 13, 2002 4:08 PM To: [EMAIL PROTECTED] Subject: RE: Blocking Instant messaging Assuming the instant messenger clients use standard ports/hostnames to connect to, ipchains/iptables would be the appropriate tool to block the clients when they use their own native protocols. Some IM clients allow you to proxy through HTTP. I guess these would take their route through squid, and the squidGuard - but assuming the hostname is static (like. instantmessenging.domain.com), and instantmessenging.domain.com doesn't hold a website it could be blocked by ipchains/tables (although personally I would prefer to block this through squidGuard). Regards, Adam
