Page 1 of 1

Block Skype by p2p filter module in Active Wall

PostPosted: Sat Jun 26, 2010 6:30 pm
by admin
Another way to block skype, please read Blocking Skype with Active Wall Professional.

Skype will readily leak out of the network, using high-numbered ports—either TCP or UDP. As a last resort, it will use ports 80 and 443, which are most commonly used for Web traffic.

1. P2P Filter config
Skype using p2p technology. We should deny p2p connection in p2p filter.
DenyP2p.gif
Blocking p2p connection
DenyP2p.gif (5.68 KiB) Viewed 19851 times

Re: Block Skype by p2p filter module in Active Wall

PostPosted: Sat Jun 26, 2010 6:32 pm
by admin
2. Http Filter Config
The Skype client can pass through tcp 80 port.
So we should check [deny http proxy tunnel] option.
denyhttptunnel.gif
disable http proxy tunnel
denyhttptunnel.gif (6.37 KiB) Viewed 19855 times

Re: Block Skype by p2p filter module in Active Wall

PostPosted: Sat Jun 26, 2010 6:34 pm
by admin
3. Https Filter Config
The Skype client can pass through tcp 443 port by using TLS protocol.
So we should check [Disable TLS 1.0] option, or we can check [Deny https proxy tunnel] and [Deny server without certificate] options.
denytls.gif
disable TLS and https proxy tunnel
denytls.gif (6.62 KiB) Viewed 19850 times

Re: Block Skype by p2p filter module in Active Wall

PostPosted: Tue Oct 26, 2010 1:02 pm
by Sancho
I would like to block all p2p except Skype. Is that possible?

Re: Block Skype by p2p filter module in Active Wall

PostPosted: Tue Oct 26, 2010 11:21 pm
by admin
Please set policies in p2p filter and http filter, but don't configure https filter.
Skype will pass through tcp 443.

Re: Block Skype by p2p filter module in Active Wall

PostPosted: Wed Oct 27, 2010 4:25 am
by Sancho
Perfect. Thank you.