Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a way to block Skype using Squid?

share|improve this question

3 Answers 3

Blocking Skyep in squid is a two stage process, firstly Skype by default uses an outbound connction on a port in the range of 2940-3000, so these should be blocked on your egress filtering.

However, if skype cannot connect on these ports, it will try to connect using port 443, which you obviously cannot block without preventing SSL access to any sites. However, Skype uses a connect method called 'Connect' to make this connection, so this can be blocked by creating an access list that looks for connections to an IP address, using the 'Connect' method:

# Your acl definitions
acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
acl connect method CONNECT
# Apply your acls
http_access deny connect numeric_IPs all

Take a look at this article for more information.

share|improve this answer

You may want to read network-admin-guide-version2.2.pdf for relevant information. There's also a document which details how Skype gets around firewall and proxy restrictions but I don't have the URL for it.

share|improve this answer

File you say can be found here: http://download.skype.com/share/security/network-admin-guide-version2.2.pdf this maybe can help as you say...

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.