Guya, i’m a new commer in MT RouterOS. i need to block some IP in my network, in order to make them cannot connect to Yahoo or MSN Messenger. how can i do this?
please advise.
Rgrds
Moeljah
Packet filtering is implemtend in ‘ip firewall filter’, ‘ip firewall filter’ does not include special matchers for MSN or Yahoo traffic. Most probably you need to block by protocol/port.
hello
us i know you can block the yahoo messenger by block the port 5050
i will show it to you
add chain=forward protocol=tcp dst-port=5050 action=drop comment=“”
disabled=no
it works
Yeah Its working,
What about MSN Messenger…
Ashish.
MSN Messenger uses TCP ports 1863 and 5190
add chain=forward protocol=tcp dst-port=1863 action=drop comment=“MSN Messenger”
disabled=no
add chain=forward protocol=tcp dst-port=5190 action=drop comment=“MSN Messenger”
disabled=no
It is NOT working
AShish.
If your trying to block MSN Messenger Live you might want to try the following ports: 6901& 6891-6900
When you block port 1863, msn will use connection over HTTP
In logs it looks like
1170741586.866 1049 195.X.X.X TCP_MISS/200 433 POST http://207.46.107.35/gateway/gateway.dll?Action=poll&SessionID=248323619.XXXXX - DIRECT/207.46.107.35 application/x-msn-m
So you have to do ACL on proxy also, to close let’s say /gateway/gateway.dll
This is what i did, based on a couple of posts in the forums:
14 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=1863 action=drop
15 X ;;; MSN Messenger
chain=forward dst-address=207.46.110.0/24 protocol=tcp action=drop
16 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=5190 action=drop
17 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=6901 action=drop
18 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=6891-6900 action=drop
Worked for me so far.
Regards!