Solved

Block skype via wingate. How?

Posted on 2007-04-10
10
1,246 Views
Last Modified: 2013-12-04
Dear EE member,
I play the role as a System Admin, I have one stubborn user who install Skype in her pc. Now, I want to block her via wingate 4.2 proxy server. I try to block her with winsock redirect service where app name is skype.exe, it failed. I try to block the skype ip, but there are too many ip. How to block her from accessing skype messager without uninstall her skype in her pc?

FYI:My server is win 2K Server.

Regards,
Peter
0
Comment
Question by:peter_chong
  • 6
  • 3
10 Comments
 
LVL 27

Assisted Solution

by:Tolomir
Tolomir earned 250 total points
ID: 18880921
Take a look at:

http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038646.html

In short:
You should block the usual skype ports + all connection attempts that go directly to an ip not to an dns name.

Tolomir

0
 
LVL 7

Expert Comment

by:TelnetServices
ID: 18881955
Tolomir -

Thanks for that one - that link was great reading... I almost wished I'd asked the question so I could give you the points!!!!

(and I didn't even know I wanted to block skype really - until now!)
0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18882097
Indeed skype can be quite hard to defeat, it's even drilling holes through the firewall ... from both sides.

This way direct NAT <---> NAT connections are possible.

Tolomir
0
Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 

Author Comment

by:peter_chong
ID: 18882274
Dear EE member,

I would like to clarify that I want block skype via wingate proxy not using squid.

Regards,
Peter

0
 
LVL 27

Accepted Solution

by:
Tolomir earned 250 total points
ID: 18882422
Well sure.

The posting should give you an idea, what to block. Now all you have to do is implement these suggestions.

I cannot help you any further apart from pointing you to the support site of wingate:

http://support.qbik.com/index.php?_a=tickets&_m=submit

(Current version is 6.2 btw.)

Tolomir
0
 

Author Comment

by:peter_chong
ID: 18895166
Dear EE member,
My wingate version is 4.2. It takes time to upgrade to later version, since it needs management approval. I am not in-charge of firewall and router. I can only access Win2K server in my workplace. Hence, I have limited resources to block the skype user.  Any alternative to block this skype user instead of uninstall her skype in the pc?

Please help.

Thanks.

Regards,
Peter
0
 

Author Comment

by:peter_chong
ID: 18902864
Dear EE member,
I have uninstalled her skype in her pc. But, how to
control if she try to reinstall again. Any web site can
I block?

Regards,
Peter
0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18903549
Well that is quite easy.

Just don't make her Administrator.

Take a look at http://www.windowsecurity.com/articles/Increasing-Security-Limited-User-Accounts-Restricted-Groups.html for details.

0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18903552
I don't think you can block all skype download sites:

http://www.google.com/search?as_q=skype+download

Tolomir
0
 
LVL 27

Assisted Solution

by:Tolomir
Tolomir earned 250 total points
ID: 18903576
Well that is quite easy.

Just don't make her Administrator.

Take a look at http://www.windowsecurity.com/articles/Increasing-Security-Limited-User-Accounts-Restricted-Groups.html for details.

0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Unmanaged Switches for Optimized Network Speeds 7 50
PCI compliance 16 50
not able to to ping server on a switch 1 33
assignment of laptops - risks 6 49
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question