Realmente_breca_MSN

[oicreal]

Pra quem tiver procurando, encontrei estas regras qeu realmente funciona para bloquear o MSN, meio trabalhosa mas funfa legal:

# Bloqueando o Messenger
iptables -A FORWARD -s 192.168.1.0/24 -p tcp --dport 1863 -j REJECT --reject-with tcp-reset
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 1863 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 63.208.13.126 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 64.4.12.200 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 64.4.12.201 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.131.249 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.194.118 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.211.61 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.104.20 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.110.2 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 204.46.106.162 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 208.175.188.30 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.239.141 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 1863 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.179.192 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.183.192 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.110.252 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.107.3 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.109.55 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.112.65 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.239.211 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.27.253 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.0.0/24 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.0.0/24 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 1863 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 7001 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 65.54.239.211 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.27.253 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 6891:6901
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 5190
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d 207.46.107.3 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 1863:1864 -j DROP
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 6891:6901
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p TCP -m tcp --dport 5190

Abraços a todos, ^^

nota: encontrei garimpando no viva o linux

[macvitor]

cara, faz uma instalação com layer 7 que com uma linha de iptables tu bloqueia o msn.

o tutorial está abaixo:
Linux: Instalação do Layer7 no Debian Etch [Artigo]

[oicreal]

Valeu a dica cara, estarei testando esta semana ainda ^^

abraços