full-disclosure - blocking SkyPE?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: lists-security at nettracers.com (lists-security@...tracers.com)
Subject: blocking SkyPE?

>I need to block SkyPE at the border of our network for many reasons.

Commercial, Off-The-Shelf: 

1)Fortinet stops this and I have used it for such...for T1 speeds you can
keep the cost under $1K and can be installed in bridge/transparent/inline
mode so as not to disturb your existing infrastructure.  

2)Checkpoint will do application/layer-7 inspection as well, but will cost
quite a bit more to purchase and implement.

Roll-your-own: 
  Probably will cost you more in time to do this, but you can use Snort to
detect and control an IPTables firewall...I have seen but not tried this
updated implementation of a dynamic IPTables config tool based on Snort
Rulesets:

 http://www.cipherdyne.com/

 http://www.cipherdyne.com/fwsnort/

Good Luck,
Bryan K. Watson
bwatson@...tracers.com