Re: [squid-users] Blocking Instant Messaging

Hi abv,

You can block on user agent for some IM clients such as MSN. Ensure you have User Agent logging turned on and an entry in your conf file. I found this useful for finding out the agent that some IM clients use.
For testing I use a file containing the agent but the result is the same..:

useragent_log /var/log/squid/useragent.log squid

acl MSNMessenger browser "/etc/squid/ACL/USER-AGENT_BLOCKED.txt"
acl http_access deny MSNMessenger

USER-AGENT_BLOCKED.txt contains the agents you want to block: Windows Live Messenger

You can go further and allow certain IPs to have MSN using a !acl.

tail -f /var/log/squid/useragent.log to see what's going on.
===
Skype requires a direct IP acl rule:
acl StopDirectIP url_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
http_access deny StopDirectIP

Again you could exclude certain IPs using a !acl

Cheers,

Nick

On 22/03/2010 07:56, "a bv" <vbavbalist_at_gmail.com> wrote:

Hi,

I have a squid running and i would like to block/control the instant
messaging trafffic at squid (especially MSN/Windows Live Messenger) .

So how can i do this effectively?

Regards

** Please consider the environment before printing this e-mail **

The information contained in this e-mail is of a confidential nature and is intended only for the addressee. If you are not the intended addressee, any disclosure, copying or distribution by you is prohibited and may be unlawful. Disclosure to any party other than the addressee, whether inadvertent or otherwise, is not intended to waive privilege or confidentiality. Internet communications are not secure and therefore Conde Nast does not accept legal responsibility for the contents of this message. Any views or opinions expressed are those of the author.

Company Registration details:
The Conde Nast Publications Ltd
Vogue House
Hanover Square
London W1S 1JU

Registered in London No. 226900
Received on Mon Mar 22 2010 - 15:28:27 MDT