MSN can recieve files even though everything is blocked?
-
I only thought NAT hole punching worked with UDP and not TCP?
-
It works with both
-
@sdale:
It works with both
I've read it works with Linux with TCP, but I didn't thought *BSD suffered from this. Is it possible to do this in pf?
What is this "modulate state"? I don't get the description fra the man page to good.
-
I've enabled NAT Outbound and setup rules for the ones I want to enable. But I can't see how this would do any difference? I must enable port 80 because I need the www to work.
Anyone?
-
http://doc.pfsense.org/index.php/How_Do_I_block_Instant_Messengers might help
-
@sai:
http://doc.pfsense.org/index.php/How_Do_I_block_Instant_Messengers might help
I'm not interessed in blocking MSN. Only the file transfer side of it.
-
Not sure if the imspector package can do this but it's not yet ready anyway afaik. Check it out once it is done.
-
You can also install Snort to detect and block file transfers for MSN messenger.
-
@sdale:
You can also install Snort to detect and block file transfers for MSN messenger.
Installed Snort and got it working. But I couldn't see rules for MSN filetransfers… In what category is it hiding?
-
Its under the chat.rules
-
@sdale:
Its under the chat.rules
I saw that one, but that is outbound and not on port 80 :/ I'll take TCPView:
http://www.microsoft.com/technet/sysinternals/utilities/TcpView.mspx
To one of the students computer and look myself. Since I don't have neither Windows nor MSN :P
-
You can edit the snort rule to detect file transfers on any port. The only problem with using snort to block file transfers is if someone initiates a file transfer, snort will block that IP from having ANY contact to your network. So basically it will cut off the file transfer and any further IM traffic to that IP for an hour.