Friday, March 28, 2008

How to block MSN Messenger

Create a set of rules:

Connected with SSH or Console to your Mikrotik server, using command like this one:

[admin] ip firewall filter add chain=forward protocol=tcp dst-address=207.46.110.0/24 action=drop log=yes comment="MSN Messenger" disabled=no

The whole set of rules I used in my scenario were:

14 X ;;; MSN Messenger

chain=forward protocol=tcp dst-port=1863 action=drop

15 X ;;; MSN Messenger

chain=forward dst-address=207.46.110.0/24 protocol=tcp action=drop

16 X ;;; MSN Messenger

chain=forward protocol=tcp dst-port=5190 action=drop

17 X ;;; MSN Messenger

chain=forward protocol=tcp dst-port=6901 action=drop

18 X ;;; MSN Messenger

chain=forward protocol=tcp dst-port=6891-6900 action=drop

0 comments: