Solved

Block filetransfers in Skype - But allowing phone calls/chats - D-link DFL 700 Firewall

Posted on 2006-07-14
12
1,051 Views
Last Modified: 2013-11-16
Hi,

We wonder if there is a way to block filetransfers in skype, but allowing employees to use the chat and phone functions in skype?

We would also be happy to get a tip on how to block messenger & Yahoo messenger from accessing the net --> All functions

We are usning D-link's DFL-700 SMB firewall (EU version) solution.

Thanks,
Whatisthesloution
0
Comment
Question by:whatisthesolution
  • 6
  • 4
  • 2
12 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17114761
See if this is any help to you;

http://www.bluecoat.com/downloads/support/tb_skype.pdf&e=14905&ei=vhC5ROXbKbXoQb7d0OEE

I'm not sure if this will prevent it.

Windows messenger part, I would do it through Group Policy.

Cheers,
Rajesh
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17115078
Messenger uses a 'signature' when it connects. You can use 'user agents' to block MSN and many other things of this nature.
Right-click your outgoing allow rule(s) and select configure http. Select the signatures tab and add as needed.

Hers'a an example
http://www.isaserver.org/tutorials/ISA-Firewall-Quick-Tip-Blocking-MSN-Messenger-Access-Enabling-Access-Some-Users.html

Open the gui, select monitoring - logging.
Make your Skpe connections; what are the ports that are being used for each function?
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17115851
Hi guys, thaks for the responses. :-)

rsivanandan - Thanks for the link, but im sorry to say it doesn't work. :-(

Make your Skpe connections; what are the ports that are being used for each function?

Well that is a part of the problem - Skype is very agressive and uses randomly ports to connect through, from port 0 ---> 65535 to connect. So blocking it makes it almost impossible.

Bu the intesting is blocking file transfers - Skype uses AES 256-bit encryption - so its a secure line when using it for business communicartion. So we dont wont to block that part. Only transfers for security reasons so employees cannot send/recieve files.

Plz note that we are usning  D-link's DFL 700 Firewall solution.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17125334
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17126439
Ok, that looks interesting!
But correct me if im wrong.... But to me it looks that if we use the signature we will block it completly from be used, right? - Or am i completly wrong?

So if I am completly wrong, how should we proceed to block the file transfers? ( and not phonecalls)
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17128167
This is a trial and error. There has to be a difference in the signatures or the data traffic or the make-up of the packets otherwise the receiving end would not know the difference between voice/data flows. Still looking. What have you found out from your end?
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17128628
No not really yet - but we found this at skype.com  - How to disable File Transfer.

To disable file transferring please add the following key to the computers registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Skype\Phone]
"DisableFileTransfer"=dword:00000001

To enable it again set the value from 1 to 0 or simply delete the key. Note that you must be logged in as an administrator to perform this change.

But doing this manually on plus 100 workstations is not an option that i like very much....  :-(

0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 17128700
Oh, if that is there then why not deploy the change through the Group Policy to all those 100 machines ???

http://www.windowsecurity.com/articles/Pushing-Out-Security-Settings-Configured-Registry.html

Cheers,
Rajesh
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17131899
Absolutely, or a registry drop via the login script?
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17136629
Well skype says that the reg. change completly blocks the transfers totally, see link..

http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=631


0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17136633
Or at least it how I read it...
0
 
LVL 1

Author Comment

by:whatisthesolution
ID: 17148691
rsivanandan,  thanks it worked!

Have nice day!
Cheers whatisthesolution
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question