Topic: How can I block skype on my LAN

[brick]

I used Dansguardian to block MSN, but now my users are switching to skype and that's killing me.
Is there anyway I can block it?

Thanks,

[imcintyre]

Fire the next person using skype?  

Sorry, couldn't resist, I hope that it made you laff . I personally have no idea how to block skype but, some things cannot be done with technology, when you block skype there'll be something else.

Unless the really do need to talk to somebody and then you have a different problem.

Have a great day

[bpivk]

Actually i agree with imcintyre.
When you block skype there'll be something else. You should take harsher measures and they would stop. They'll just start using ICQ, Yahoo, web messenger (you can access MSN from the internet),...

But you CAN implement a password for accessing internet, blocking websites, internet content and tracking their browsing habits (search for squidguard).

[CharlieBrady]

Actually i agree with imcintyre.

And I agree with both of you.

Use the "cluebat".

[bpivk]

lol
Thanks for the new word for today Charlie. I have a feeling i'll use it quite often  

[CharlieBrady]

lol
Thanks for the new word for today Charlie.

HTH. See also LART - http://en.wiktionary.org/wiki/Luser_Attitude_Readjustment_Tool

And see also clue-by-four - which will make more sense if you know that two inches by four inches is a common size for construction lumber in non-metric countries.

[bpivk]

if you know that two inches by four inches is a common size for construction lumber in non-metric countries.

I watched Ed, Edd and Eddy with my brother once so i got to know this expression.

[brick]

http://www.secdev.org/conf/skype_BHEU06.pdf

page78:

iptables -I FORWARD -p udp -m length --length 39 -m u32 \ --u32 ’27&0x8f=7’ --u32 ’31=0x01020304 ’ -j QUEUE

This will make skype deaf, but my problem is that skype uses many (any) port to connect

[bpivk]

1.) Read the 1. post from imcintyre, bpivk (me   ) and Charlie.
2.) Use the "cluebat". As Charlie suggested (google for it).
 

And i have to say that this is the most cheerfull post i have ever read.

[haymann]

eWeek had an article a few months back about Skype and Enterprise. As far as blocking it, their advise was

The best way to control Skype's spread is to deny users permission to install the application on the desktop. Companies with an in-place, written policy denying Skype usage—combined with a Least-Privilege User Account, or LUA, ethic—will keep users from letting the software land a beachhead on the network.

Not much help, but it was an interesting article if you can handle all of the ads on their page...
Ryan