Block filetransfers in Skype - But allowing phone calls/chats - D-link DFL 700 Firewall

Hi,

We wonder if there is a way to block filetransfers in skype, but allowing employees to use the chat and phone functions in skype?

We would also be happy to get a tip on how to block messenger & Yahoo messenger from accessing the net --> All functions

We are usning D-link's DFL-700 SMB firewall (EU version) solution.

Thanks,
Whatisthesloution
LVL 1
whatisthesolutionAsked:
Who is Participating?
 
rsivanandanConnect With a Mentor Commented:
Oh, if that is there then why not deploy the change through the Group Policy to all those 100 machines ???

http://www.windowsecurity.com/articles/Pushing-Out-Security-Settings-Configured-Registry.html

Cheers,
Rajesh
0
 
rsivanandanCommented:
See if this is any help to you;

http://www.bluecoat.com/downloads/support/tb_skype.pdf&e=14905&ei=vhC5ROXbKbXoQb7d0OEE

I'm not sure if this will prevent it.

Windows messenger part, I would do it through Group Policy.

Cheers,
Rajesh
0
 
Keith AlabasterEnterprise ArchitectCommented:
Messenger uses a 'signature' when it connects. You can use 'user agents' to block MSN and many other things of this nature.
Right-click your outgoing allow rule(s) and select configure http. Select the signatures tab and add as needed.

Hers'a an example
http://www.isaserver.org/tutorials/ISA-Firewall-Quick-Tip-Blocking-MSN-Messenger-Access-Enabling-Access-Some-Users.html

Open the gui, select monitoring - logging.
Make your Skpe connections; what are the ports that are being used for each function?
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
whatisthesolutionAuthor Commented:
Hi guys, thaks for the responses. :-)

rsivanandan - Thanks for the link, but im sorry to say it doesn't work. :-(

Make your Skpe connections; what are the ports that are being used for each function?

Well that is a part of the problem - Skype is very agressive and uses randomly ports to connect through, from port 0 ---> 65535 to connect. So blocking it makes it almost impossible.

Bu the intesting is blocking file transfers - Skype uses AES 256-bit encryption - so its a secure line when using it for business communicartion. So we dont wont to block that part. Only transfers for security reasons so employees cannot send/recieve files.

Plz note that we are usning  D-link's DFL 700 Firewall solution.
0
 
Keith AlabasterEnterprise ArchitectCommented:
0
 
whatisthesolutionAuthor Commented:
Ok, that looks interesting!
But correct me if im wrong.... But to me it looks that if we use the signature we will block it completly from be used, right? - Or am i completly wrong?

So if I am completly wrong, how should we proceed to block the file transfers? ( and not phonecalls)
0
 
Keith AlabasterEnterprise ArchitectCommented:
This is a trial and error. There has to be a difference in the signatures or the data traffic or the make-up of the packets otherwise the receiving end would not know the difference between voice/data flows. Still looking. What have you found out from your end?
0
 
whatisthesolutionAuthor Commented:
No not really yet - but we found this at skype.com  - How to disable File Transfer.

To disable file transferring please add the following key to the computers registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Skype\Phone]
"DisableFileTransfer"=dword:00000001

To enable it again set the value from 1 to 0 or simply delete the key. Note that you must be logged in as an administrator to perform this change.

But doing this manually on plus 100 workstations is not an option that i like very much....  :-(

0
 
Keith AlabasterEnterprise ArchitectCommented:
Absolutely, or a registry drop via the login script?
0
 
whatisthesolutionAuthor Commented:
Well skype says that the reg. change completly blocks the transfers totally, see link..

http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=631


0
 
whatisthesolutionAuthor Commented:
Or at least it how I read it...
0
 
whatisthesolutionAuthor Commented:
rsivanandan,  thanks it worked!

Have nice day!
Cheers whatisthesolution
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.