Blocking Skype on Firewall

[tinhnt]

Hi all,

 

I am using WatchGuard firewall in my network system. I want to block all of clients to use Skype from my firewall.

Has anyone any idea?

 

My Firebox runs the OS ver. XTM 11.0.

 

-------------------

Thanh Tinh

[email protected]

[tom_newton]

Depends how you have it set up right now. If you are "open by default" you're SoL.

You'll need to try and proxy as much traffic as possible, then use your web filter to block connects to bare IPs. That usually works ok.

[MatthewL]

We have a whole estate of Watchguard kit, just implementing XTM where we can, 150 sites to do! What we do is block all outgoing traffic and only allow as needed i.e. Port 80 & 443 for internet, you get the idea, just block the port Skype runs as an outgoing rule.

 

Judging by [ame=http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers]this[/ame] list, it runs on port 23399.

 

HTH

[tinhnt]

Hello

 

I tried to be with you, if I block all outgoing traffic including port 80 and 443, Skype is drop => it's ok.

But if so client can not access to internet.

I want to block skype, and allow to access to internet.

Skype runs on default port 23399, and others 80. 443, etc.

 

NTT

 

-------------------

Thanh Tinh

[email protected]

[tom_newton]

tinh, try proxying traffic on port 80/443. Then you'll have more control, and be able to nail that nasty skype

[lsjames]

Skype using high-numbered ports, either TCP or UDP. As a last resort, it will use ports 80 and 443, which are most commonly used for Web traffic.

[lsjames]

Please read this topic, maybe it can give you some tips.

Block Skype by p2p filter module in Active Wall