Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: brick on March 20, 2007, 03:29:12 AM

Title: How can I block skype on my LAN
Post by: brick on March 20, 2007, 03:29:12 AM

I used Dansguardian to block MSN, but now my users are switching to skype and that's killing me.
Is there anyway I can block it?

Thanks,

Title: How can I block skype on my LAN
Post by: imcintyre on March 20, 2007, 04:17:29 PM

Fire the next person using skype?  :shock:

Sorry, couldn't resist, I hope that it made you laff :lol: . I personally have no idea how to block skype but, some things cannot be done with technology, when you block skype there'll be something else.

Unless the really do need to talk to somebody and then you have a different problem.

Have a great day :!:

Title: How can I block skype on my LAN
Post by: bpivk on March 20, 2007, 04:36:01 PM

Actually i agree with imcintyre.
When you block skype there'll be something else. You should take harsher measures and they would stop. They'll just start using ICQ, Yahoo, web messenger (you can access MSN from the internet),...

But you CAN implement a password for accessing internet, blocking websites, internet content and tracking their browsing habits (search for squidguard).

Title: How can I block skype on my LAN
Post by: CharlieBrady on March 20, 2007, 06:48:29 PM

Quote from: "bpivk"

Actually i agree with imcintyre.

And I agree with both of you.

Use the "cluebat".

Title: How can I block skype on my LAN
Post by: bpivk on March 20, 2007, 06:54:06 PM

lol
Thanks for the new word for today Charlie. I have a feeling i'll use it quite often  :lol:

Title: How can I block skype on my LAN
Post by: CharlieBrady on March 20, 2007, 07:27:15 PM

Quote from: "bpivk"

lol
Thanks for the new word for today Charlie.

HTH. See also LART - http://en.wiktionary.org/wiki/Luser_Attitude_Readjustment_Tool

And see also clue-by-four - which will make more sense if you know that two inches by four inches is a common size for construction lumber in non-metric countries.

Title: How can I block skype on my LAN
Post by: bpivk on March 20, 2007, 07:31:30 PM

Quote

if you know that two inches by four inches is a common size for construction lumber in non-metric countries.

I watched Ed, Edd and Eddy with my brother once so i got to know this expression. :)

Title: How can I block skype on my LAN
Post by: brick on March 20, 2007, 07:32:12 PM

http://www.secdev.org/conf/skype_BHEU06.pdf

page78:

iptables -I FORWARD -p udp -m length --length 39 -m u32 \ --u32 ’27&0x8f=7’ --u32 ’31=0x01020304 ’ -j QUEUE

This will make skype deaf, but my problem is that skype uses many (any) port to connect :(

Title: How can I block skype on my LAN
Post by: bpivk on March 20, 2007, 07:36:10 PM

1.) Read the 1. post from imcintyre, bpivk (me  :D ) and Charlie.
2.) Use the "cluebat". As Charlie suggested (google for it).
 :lol:

And i have to say that this is the most cheerfull post i have ever read.

Title: How can I block skype on my LAN
Post by: haymann on March 20, 2007, 07:54:06 PM

eWeek had an article (http://www.eweek.com/article2/0,1759,2043368,00.asp) a few months back about Skype and Enterprise. As far as blocking it, their advise was

Quote

The best way to control Skype's spread is to deny users permission to install the application on the desktop. Companies with an in-place, written policy denying Skype usage—combined with a Least-Privilege User Account, or LUA, ethic—will keep users from letting the software land a beachhead on the network.

Not much help, but it was an interesting article if you can handle all of the ads on their page...
Ryan