Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Blocking Skype
  •  
Orlando

Messages: 3
Karma: 0
Send a private message to this user

Hello!

How could I block Skype by KWF if it's uses the 80 and 443 ports?

Thank you!

Orlando
  •  
Anonymous
Karma:
You can't!
Either uninstall and use some other VOIP software Laughing , or disable the use of http/https ports in the skype config.
  •  
Orlando

Messages: 3
Karma: 0
Send a private message to this user

I want to block the chat of Skype....and the user can active the http port setting...

Any idea?
  •  
Anonymous
Karma:
Maybe things will change now Ebay have bought Skype. Time will tell.

But for now.... your only hope is... New company policy... no skype Laughing



  •  
FRiC

Messages: 56
Karma: 0
Send a private message to this user
It might be possible to block Skype by making use of the P2P Eliminator, although the P2P Eliminator still needs much work.

Or you could switch to another firewall product that have P2P blocking and can specifically block Skype.
  •  
Anonymous
Karma:
Is there such a firewall that can run on a network gateway and specifically stop Skype traffic running on port 80, but let all other browsing go?

As for the P2P solution, (and also using the connection limits), it doesn't really work out because of the port 80 usage. Unless above is true! That horrible choice of port even plays havoc with enforcing AD group policies to control browsing. If you need to allow web browsing (even via a proxy), then skype will flow through it. Evil or Very Mad



  •  
FRiC

Messages: 56
Karma: 0
Send a private message to this user
I haven't actually tried to block Skype, since we encourage Skype usage, as you probably noticed from our previous thread. Razz

Anyway this is just a guess, Skype will always try to use higher numbered ports, so it might be possible to open a range of ports, say 8000-8500, to fool Skype into using them, and then block those ports by using the P2P Eliminator.

Below is cut and pasted from Check Point's website, and Check Point isn't the only one with Skype blocking products.

Peer-to-Peer
InterSpect blocks Peer to Peer traffic by identifying the proprietary protocols and preventing the initial connection to the Peer to Peer networks. New Peer to Peer protection code is now available with Updates, which enables SmartDefense to block key P2P applications including Kazaa, Gnutella, eMule, Skype, and BitTorrent.
  •  
Orlando

Messages: 3
Karma: 0
Send a private message to this user

I have solved the problem with a new software restriction policy...thank you!
Previous Topic: Statistics - problem
Next Topic: Speed limit and user restriction ?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Nov 20 14:30:18 CET 2017

Total time taken to generate the page: 0.00458 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.