REF: Blocking Yahoo

Mr. Ritter netfilter at candlefire.org
Fri Nov 3 16:50:42 CET 2006


lubasi wrote:
> # Route all www traffic to port 3128 for http acceleration
> /sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j
> REDIRECT --to-port 3128
> 
> #Block Yahoo Messnger
> /sbin/iptables -I FORWARD -s MYNETWORK/24 -d 216.155.193.0/22 -j DROP

How about simply moving the Yahoo block rule above the squid proxy rule, 
then you don't have to worry about Yahoo/Gaim using http tunneling.

--
Ritter




More information about the netfilter mailing list