Blocking Skype with Active Wall Professional

[admin]

Another way to block skype, please read Block Skype by p2p filter module in Active Wall.

Skype will readily leak out of the network, using high-numbered ports—either TCP or UDP. As a last resort, it will use ports 80 and 443, which are most commonly used for Web traffic.

Step 1. Port Filter Config
The Skype client uses high-numbered ports to connect SkypeNet.
We can block high-numbered ports, but it is recommended that we should close all ports except some common used ports.

Blocking skype by port

commport.gif (10.29 KiB) Viewed 19084 times

[admin]

Step 2. Http Filter Config
The Skype client can pass through tcp 80 port.
So we should check [deny http proxy tunnel] option.

disable http proxy tunnel

denyhttptunnel.gif (6.37 KiB) Viewed 19084 times

[admin]

Step 3. Https Filter Config
The Skype client can pass through tcp 443 port by using TLS protocol.
So we should check [Disable TLS 1.0] option, or we can check [Deny https proxy tunnel] and [Deny server without certificate] options.

disable TLS and https proxy tunnel

denytls.gif (6.62 KiB) Viewed 19082 times

[admin]

Import the policy
1. Please download the policy "DenySkype" at http://awall.lanctrl.com/en/update/Policy/ and save it to C:\Program Files\AWall\Policy
2. Select the group which you want deny skype, click mouse right button and select menu [Import Policy]. Select [DenySkype] and then click botton <OK>