Solved

Block skype via wingate. How?

Posted on 2007-04-10
10
1,239 Views
Last Modified: 2013-12-04
Dear EE member,
I play the role as a System Admin, I have one stubborn user who install Skype in her pc. Now, I want to block her via wingate 4.2 proxy server. I try to block her with winsock redirect service where app name is skype.exe, it failed. I try to block the skype ip, but there are too many ip. How to block her from accessing skype messager without uninstall her skype in her pc?

FYI:My server is win 2K Server.

Regards,
Peter
0
Comment
Question by:peter_chong
  • 6
  • 3
10 Comments
 
LVL 27

Assisted Solution

by:Tolomir
Tolomir earned 250 total points
ID: 18880921
Take a look at:

http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038646.html

In short:
You should block the usual skype ports + all connection attempts that go directly to an ip not to an dns name.

Tolomir

0
 
LVL 7

Expert Comment

by:TelnetServices
ID: 18881955
Tolomir -

Thanks for that one - that link was great reading... I almost wished I'd asked the question so I could give you the points!!!!

(and I didn't even know I wanted to block skype really - until now!)
0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18882097
Indeed skype can be quite hard to defeat, it's even drilling holes through the firewall ... from both sides.

This way direct NAT <---> NAT connections are possible.

Tolomir
0
 

Author Comment

by:peter_chong
ID: 18882274
Dear EE member,

I would like to clarify that I want block skype via wingate proxy not using squid.

Regards,
Peter

0
 
LVL 27

Accepted Solution

by:
Tolomir earned 250 total points
ID: 18882422
Well sure.

The posting should give you an idea, what to block. Now all you have to do is implement these suggestions.

I cannot help you any further apart from pointing you to the support site of wingate:

http://support.qbik.com/index.php?_a=tickets&_m=submit

(Current version is 6.2 btw.)

Tolomir
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:peter_chong
ID: 18895166
Dear EE member,
My wingate version is 4.2. It takes time to upgrade to later version, since it needs management approval. I am not in-charge of firewall and router. I can only access Win2K server in my workplace. Hence, I have limited resources to block the skype user.  Any alternative to block this skype user instead of uninstall her skype in the pc?

Please help.

Thanks.

Regards,
Peter
0
 

Author Comment

by:peter_chong
ID: 18902864
Dear EE member,
I have uninstalled her skype in her pc. But, how to
control if she try to reinstall again. Any web site can
I block?

Regards,
Peter
0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18903549
Well that is quite easy.

Just don't make her Administrator.

Take a look at http://www.windowsecurity.com/articles/Increasing-Security-Limited-User-Accounts-Restricted-Groups.html for details.

0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18903552
I don't think you can block all skype download sites:

http://www.google.com/search?as_q=skype+download

Tolomir
0
 
LVL 27

Assisted Solution

by:Tolomir
Tolomir earned 250 total points
ID: 18903576
Well that is quite easy.

Just don't make her Administrator.

Take a look at http://www.windowsecurity.com/articles/Increasing-Security-Limited-User-Accounts-Restricted-Groups.html for details.

0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now