TeamViewer Block

[buntha]

Dear Everyone !!!!

I have problem with block teamviewer first i block teamviewer by squidguard on category "remotecontrol" and block in rule by port 443 &5938 with other ip address but i seem rule not working because teamviewer still access in my Lan.
Please help me :( :(
Thank

[KOM]

I don't have any experience with Teamviewer, but in these situations I would do a packet capture that targets the LAN IP using TeamViewer and see what's not being blocked.  I'm not clear about what you're trying to block, the Teamviewer website or the Teamviewer remote connection client?

[buntha]

Thank for reply !!!
I want to block teamviewer client remote access and i use snort to capture LAN and wan use port sent in & out but when i take the port and ip from snort capture to block in Firewall Rule seem not work. I don't know why ? :(

[KOM]

You would have to share the ports used by Teamviewer and then show us your firewall rules.

[BBcan177]

Take a look at the Emerging Threats "policy" rules.

There are rules that you can enable to block TeamViewer.
If they get alerted, it will also tell you the ports involved. Here is one that I found online that has the ports listed.

http://doc.emergingthreats.net/bin/view/Main/2008794

[buntha]

Ok Thank for your reply and i will follow your step. I hope i can do this as well.  :) :) :) :)