Topic: msn proxy

[Normando]

Hello

I want to run msn-proxy http://sourceforge.net/projects/msn-proxy to capture msn traffic. I have installed msn-proxy without problems, but I don't know how to configure the firewall to block or redirect the 1863 port. Or I can't understand correctly what is need it (block port or redirect)

This is a copy from the INSTALL file

Now the proxy should be ready to run, just redirect the msn clients to
the proxy (all connections to the port 1863 should be redirect at your
gateway / firewall).

You need to block http connections from msn client (the client first try to
connect on 1863 port and after some fail it will try the http method).

The most effective way to do this is through a web proxy (squid).

I was read http://wiki.contribs.org/Firewall#Block_outgoing_ports

Any help will be appreciate.

[Normando]

Me again

If I understood ok, there are to things to do:

1 - Redirect outgoing port 1863 to localhost (192.168.0.1:1863)
2 - Block http connections from msn

[mmccarn]

1 - Redirect outgoing port 1863 to localhost (192.168.0.1:1863)

Take a look at /etc/e-smith/templates/etc/rc.d/init.d/masq/35transproxy and
/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustTransProxy to see how the transparent proxies for Squid and SMTP are set up and maintained.

35transproxy sets up the iptables rules, 90adjustTransProxy inserts the actual values for your WAN IP, and applies changes if your WAN IP changes (in case you have a dynamic IP)

You will need to do something similar for port 1863.

2 - Block http connections from msn

I don't think you can block http connections from msn - I think you need to block http connection to msn.  However, if your SME transparent proxy is enabled you'll have to do this with squidguard or dansguardian.

Since the instructions you reference for blocking outgoing ports do *not* block any traffic between your LAN clients and your SME server your users would still be able to get to msn on port 80 by way of the SME proxy.

I found this KB at Microsoft listing the URLs you will need to block (either in squidguard or in dansguardian): http://support.microsoft.com/kb/927847

[Normando]

I will investigate those templates. If I get good results, I will back with a contrib

Thanks for the help mmccarn

[hu3b11b7]

hi


does anyone know the proper answer to this problem, I am facing with it no, not too much lluck

thanks

Now the proxy should be ready to run, just redirect the msn clients to
the proxy (all connections to the port 1863 should be redirect at your
gateway / firewall).

You need to block http connections from msn client (the client first try to
connect on 1863 port and after some fail it will try the http method).

The most effective way to do this is through a web proxy (squid).