Solved

Blocking IM (MSN, Yahoo Messenger) using Squid

Posted on 2004-09-01
3
25,516 Views
Last Modified: 2013-11-22
I have Squid running and I am looking for a way to block Yahoo and MSN messenger. My search of the Internet has not come up with any working solutions.

Has anybody been able to successfully block these IM programs using Squid?

Setup:

Squid 2.4 Stable6
OS: FreeBSD 4.9

Thanks in advance
0
Comment
Question by:cchinoy
3 Comments
 
LVL 62

Expert Comment

by:gheist
ID: 11975468
1) Install all messengers you can imagine - Yahoo! , MSN , AIM , ICQ and Trillian
2) Install packet sniffer like ethereal on workstation
3) now try running all messengers one at a time
4) now look for common signs on how to block them

For example AIM uses host login.oscar.aol.com
MSN Messenger uses MIME type containing "X-MSN-Messenger" string

Same applies to digital media players, spywares, viruses etc.

Never try to use these programs when they are blocked for common users.
0
 

Author Comment

by:cchinoy
ID: 12102723
Thank you I will give this a try
0
 
LVL 2

Accepted Solution

by:
jdw_2004 earned 500 total points
ID: 12132638
These applications use ports other than HTTP.  In fact, these programs are particularly tenacious in their efforts to circumvent restrictions.  Also, for what web accesses they do perform, instant messaging clients may or may not honor the system's proxy configuration.  

Thus, you will not be able to effectively block IM programs using squid, without assistance from a firewall or router.  Even then, eternal vigilance will be required as these programs find new ways to weasel through with each new release.

The following page is very helpful:

http://nscsysop.hypermart.net/no_chat.html

This previous EE question may also be instructive on firewall blocking, if you want to go that route:

http://www.experts-exchange.com/Security/Firewalls/Q_20610865.html

0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question