Download the blacklists for dansgardian and update the lists on your server then check the box for chat services etc .. it may help .. http and https are often used by chat clients as a backup and a means of resolving servers . Lost many hours to trying to block such ...
Elmar Natter wrote: > Hello Lane, > > thanks for your suggestions. I did it in the way you described, and it > workes for a miranda client, connecting to icq but not for the original > icq client. Probably I've got not all IP's from the login Servers from > ICQ, these I have: > > 64.12.161.153 > 64.12.200.89 > 205.188.179.233 > 205.188.7.158 > 205.188.7.159 > 205.188.248.25 > > Anybody knows what else to block? > > Regards! > >> Firewall > Outgoing Firewall > Add a new rule >> >> >> ALLOW access to all ports of the IP addresses of the ICQ servers from >> your static IP. >> DENY access to all ports the IP addresses of the ICQ servers from the >> remainder of your internal networks (probably GREEN.) >> Make sure the ALLOW rule is listed before the DENY rule. >> >> Hope this helps. >> >> Lane Beneke >> Network Administrator >> Southern Piping Company >> Wilson, NC, USA >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Elmar >> Natter >> Sent: Thursday, April 17, 2008 4:13 AM >> To: [email protected] >> Subject: [Efw-user] How to block ICQ on EFW? >> >> I really got stuck in blocking ICQ on my network. My scenario is >> like this: >> >> I want to block ICQ for everybody on network besides me (static IP). >> >> What I did: >> - Outgoing Firewall is active, but ICQ-Client connects thru 80 or 443 >> - transparent HTTP Proxy is on, in URL-Filter is enabled and the >> IP's login.icq.com is blocked >> - I used DNS-Proxy / AntiSpyware and blocked the ICQ Domains and >> Login IPs >> >> But still no effort, ICQ CLient still logs in. >> >> Anybody an idea? >> >> >> >> >> >> ------------------------------------------------------------------------ >> - >> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference >> Don't miss this year's exciting event. There's still time to save $100. >> Use priority code J8TL2D2. >> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/j >> avaone >> _______________________________________________ >> Efw-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/efw-user >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference >> Don't miss this year's exciting event. There's still time to save $100. >> Use priority code J8TL2D2. >> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone >> _______________________________________________ >> Efw-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/efw-user >> >> >> > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > Efw-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/efw-user > -- Gregory Machin CT-Net www.ct-net.org [EMAIL PROTECTED] phone : +27 12 379 3497 fax : +27 12 379 4113 Cell : +27 72 524 8096 humans do not use the address below its for trapping spam. spamtrap [EMAIL PROTECTED] ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
