Re: [ILUG-BOM] how to block yahoo chat and gtalk from squid proxy

On Dec 13, 2007 3:15 PM, Agnello George agnello.dsouza@gmail.com wrote:

...

Look for iptables -t mangle -A PREROUING chain

What i tried to do was a Prerouting

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 5050 -j REDIRECT --to-port 3128

and in my squid conf

acl chat_ports port 5050 http_access deny CONNECT !chat_ports

What are you trying to do here? Allow only port 5050?

but i am still able to log in to the chat client

The location of the acl in your squid.conf is important. Squid processes the file top-down. If you have enabled http access (either explicitly or implicitly) to yahoo chat before ( ie above) the chat-blocking acl, squd will allow access.

BTW, have you configured yahoo messenger to actually use the proxy?

Regards, NMK.