I can not block to MSN

futureng

i try all tell this forum but i can not block MSN.

i did = Firewall LAN rule block 1863
i did = put. Proxy Content URL => svcs.microsoft.com rad.msn.com

but doesnt work this rules.

Cry Havok

A quick use of the search function identified a large number of relevant posts - did none of them work for you?

futureng

no. doesnt work.
there is special signature for Msn applicaion. But what can i put this signature.

Cry Havok

When you say "signature", do you mean a snort signature?

futureng

yes. i think.
for example = "^msn54654^&?cdkasg…....."
How can i block. Help pls.

Cry Havok

I cannot give you a useful answer if you are just guessing ;)

If that is a snort signature then you would have to:

Install snort
Configure snort for active response
Install the relevant signature

futureng

There is not snort package in pfsense package list. How can i install snort?

Cry Havok

By hand - details of the process can be found in a number of threads in the packages forum. That will not give you a GUI, you'll have to maintain Snort through the config files. Alternatively, upgrade to 1.2.1 beta and (from what I've read) you'll find Snort available in the package system.

You'll also need some reasonable hardware (at least 1 GB of RAM, a 1 GHz CPU that's currently >90% idle and non Realtek NICs) as running Snort has major performance implications.