Re: use ipchains to block msn messenger



Hello,

elsid*** a écrit :
On Aug 30, 7:33 pm, pamela...@xxxxxxxxx wrote:

I need to disable the function of file transfer of msn messenger ,
but chat will be allowed.

Can I use ipchains to do that ?
Can I block the ports used by msn messenger ? How to block them and
what ports should be blocked ?

iptables -A FORWARD -p tcp --dport 6681 -j DROP
iptables -A FORWARD -p tcp --dport 6900 -j DROP

The OP asked about ipchains, not iptables. [I'm amazed that someone still uses 2.2 kernels. I know that ipchains can work with 2.4 and early 2.6 kernels, but I would be even more amazed that someone uses ipchains with a 2.4 kernel or 2.6 kernel.]

MSN Messenger file transfer can use TCP ports 6891 to 6900, so you'de better block the whole range. Make sure you drop local and remote ports. But I'm afraid this would block only direct file transfers, not those that are relayed through MSN servers when direct transfer fails.

Don't ask me about how to write ipchains rules, there has been too much time since I last used it. ;-)
.


Quantcast