Bloqueio Efetivo de MSN Só com Iptables !!!

brunofeliped
(usa Debian)

Enviado em 25/11/2008 - 08:07h

Bom dia amigos ...
No meu cenário trabalho com Iptables / Squid ...
O bloqueio através do SQUID está OK. O meu problema são as máquinas que devem passar por fora do proxy (com isso pegam as regras de iptables), porém procurei muito pela internet e não encontrei nenhuma solução para o bloqueio ...

Gostaria da ajuda da comunidade

Abraços

rickments
(usa Ubuntu)

Enviado em 25/11/2008 - 09:54h

iptables -A FORWARD -s 192.168.0.0/24 -d 207.46.104.0/24 -j DROP
iptables -A FORWARD -s 192.168.0.0/24 -d 207.46.110.0/24 -j DROP
iptables -A FORWARD -s 192.168.0.0/24 -p tcp --dport 1863 -j DROP
iptables -A FORWARD -s 192.168.0.0/24 -p udp --dport 1863 -j DROP

rickments
(usa Ubuntu)

Enviado em 25/11/2008 - 10:15h

iptables -A FORWARD -s 192.168.0.0/24 -d orkut.com -j REJECT

para bloquear o orkut mesmo esquema, porem, agora é so adaptar ao que vc necessita e boa :)
abraço

brunofeliped
(usa Debian)

Enviado em 25/11/2008 - 10:31h

Amigos ... Consegui através do seguinte !!!

# Bloqueio MSN
$Ipt -A FORWARD -d login.live.com -p tcp --dport 443 -j DROP
$Ipt -A INPUT -d login.live.com -p tcp --dport 443 -j DROP
$Ipt -A FORWARD -d login.live.com -j DROP
$Ipt -A INPUT -d login.live.com -j DROP
$Ipt -A FORWARD -s $Ip/$Masc -p tcp --dport 1863 -j REJECT --reject-with tcp-reset
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p tcp --dport 1863 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 63.208.13.126 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 64.4.12.200 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 64.4.12.201 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.131.249 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.194.118 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.211.61 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.104.20 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.110.2 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 204.46.106.162 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 208.175.188.30 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.239.141 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 1863 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.179.192 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.183.192 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.110.252 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.107.3 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.109.55 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.112.65 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.239.211 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.27.253 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.0.0/24 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.0.0/24 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 1863 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 7001 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 65.54.239.211 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.27.253 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 6891:6901 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 5190 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -d 207.46.107.3 -j DROP
$Ipt -t mangle -A PREROUTING -s $Ip/$Masc -p TCP -m tcp --dport 1863:1864 -j DROP

Onde:
$Ipt = Iptables
$Ip/$Masc = Ip da Rede, por exemplo 192.168.0.0/24