rendered paste body## Bloqueo de servicios
# AIM e ICQ
/sbin/iptables -A FORWARD -p TCP --dport 9898 -j REJECT
/sbin/iptables -A FORWARD -p TCP --dport 5190:5193 -j REJECT
/sbin/iptables -A FORWARD -d login.oscar.aol.com -j REJECT
/sbin/iptables -A FORWARD -d login.icq.com -j REJECT
# Jabber
/sbin/iptables -A FORWARD -p TCP --dport 5222:5223 -j REJECT
# MSN Messenger
/sbin/iptables -A FORWARD -p TCP --dport 1863 -j REJECT
/sbin/iptables -A FORWARD -d 64.4.13.0/24 -j REJECT
# Yahoo! Messenger
/sbin/iptables -A FORWARD -p TCP --dport 5000:5010 -j REJECT
/sbin/iptables -A FORWARD -d cs.yahoo.com -j REJECT
/sbin/iptables -A FORWARD -d scsa.yahoo.com -j REJECT
# Red de Audio Galaxy
/sbin/iptables -A FORWARD -d 64.245.58.0/23 -j REJECT
# GNUtella, Bearshare y ToadNode
/sbin/iptables -A FORWARD -p TCP --dport 6346 -j REJECT
# eDonkey
/sbin/iptables -A FORWARD -p tcp --dport 4661:4662 -j REJECT
/sbin/iptables -A FORWARD -p udp --dport 4665 -j REJECT
# Puertos y redes de Kazaa y Morpheus
#/sbin/iptables -A FORWARD --dport 1214 -j REJECT
/sbin/iptables -A FORWARD -d 213.248.112.0/24 -j REJECT
/sbin/iptables -A FORWARD -d 206.142.53.0/24 -j REJECT
# Red de Napigator
/sbin/iptables -A FORWARD -d 209.25.178.0/24 -j REJECT
# Red de Napster
/sbin/iptables -A FORWARD -d 64.124.41.0/24 -j REJECT
# Redes de WinMX
/sbin/iptables -A FORWARD -d 209.61.186.0/24 -j REJECT
/sbin/iptables -A FORWARD -d 64.49.201.0/24 -j REJECT
# Red de IMesh
/sbin/iptables -A FORWARD -d 216.35.208.0/24 -j REJECT
CONFIGURACION DE SQUID
acl aplicaciones_prohibidas req_mime_type -i "/etc/squid/mime-prohibido"
http_access deny aplicaciones_prohibidas
contenido de:
# cat /etc/squid/mime-prohibido
^application/x-msn-messenger$