Solved

How to Block GTalk Messenger?

Posted on 2008-11-01
4
1,327 Views
Last Modified: 2013-12-06
We have a Squid Server Version 2.6 running on a Fedora Core 7 Box. I need to block the Gtalk Messenger on the network.

Please Help...... Thanks
0
Comment
Question by:efg-uae
  • 2
  • 2
4 Comments
 
LVL 14

Expert Comment

by:Deepak Kosaraju
ID: 22860403
It will be hard to block the web gtalk unless you also block gmail from the banned sites. For gtalk client just block the port gtalk runs under (5223).
Add the following in Squid...
http_access deny blocked ports
acl blocked_ports port 5223 5222

0
 
LVL 14

Expert Comment

by:Deepak Kosaraju
ID: 22860410
you can block talk.google.com using iptables.

iptables -A PREROUTING -t nat -d talk.google.com -j DROP
iptables -A PREROUTING -t nat -p tcp --dport 5222 -j DROP

more than this level would require squid to allow https to gmail.google.com, but block it for all other .google.com sites.

and the best tool to block is layer7 filtering protocol:
http://l7-filter.sourceforge.net/
Gud luck
0
 
LVL 7

Author Comment

by:efg-uae
ID: 22860424
I dont want to use the ipTables. as i need to manage its access for some users. not for all.
I need solution in Squid only.
0
 
LVL 7

Accepted Solution

by:
efg-uae earned 0 total points
ID: 22860616
I am done.
I used Wireshark to track the all IPs. and then blocked all IP's by IPTables.
Following is the list of IPs. and I have Make a Exclusion for some of my MAC Addresses. so that some users who are allowed for Gtalk can use it.
 

iptables -A PREROUTING -t nat -m mac --mac-source xx:xx:xx:xx:xx:xx -j ACCEPT

iptables -A PREROUTING -t nat -d talk.google.com -j DROP
iptables -A PREROUTING -t nat -p tcp --dport 5222 -j DROP
iptables -A PREROUTING -t nat -d 209.85.163.125 -j DROP
iptables -A PREROUTING -t nat -d 72.14.205.189 -j DROP
iptables -A PREROUTING -t nat -d 216.239.51.125 -j DROP
iptables -A PREROUTING -t nat -d 209.85.201.125 -j DROP
iptables -A PREROUTING -t nat -d 74.125.77.103 -j DROP
iptables -A PREROUTING -t nat -d 72.14.235.125 -j DROP
iptables -A PREROUTING -t nat -d 72.14.253.125 -j DROP
 For me it works very fine. and Gtalk was unable to connect.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In my business, I use the LTS (Long Term Support) versions of Linux. My workstations do real work, and so I rarely have the patience to deal with silly problems caused by an upgraded kernel that had experimental software on it to begin with from a r…
The purpose of this article is to fix the unknown display problem in Linux Mint operating system. After installing the OS if you see Display monitor is not recognized then we can install "MESA" utilities to fix this problem or we can install additio…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question