Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



IDS: Re: Skype & IPS vendor claims

Re: Skype & IPS vendor claims

From: Jackie Lai <gclai_at_draytek.com>
Date: Wed, 17 May 2006 11:08:27 +0800

Yes, we did it!
But there is one exception condition.
Once you have established the skype connection and keep login, then you
enable "BLOCK Skype" function on IPS, it will not work.

But if you logout and then login, the IPS will detect the activity and BLOCK
it.
========================
Jackie Lai, CISSP
mailto: gclai [at] draytek [dot] com
========================
----- Original Message -----
From: "Vladimir Parkhaev" <vladimir_at_arobas.net>
To: <focus-ids_at_lists.securityfocus.com>
Sent: Wednesday, May 17, 2006 12:08 AM
Subject: Skype & IPS vendor claims

>
> Greetings,
>
> Many IPS vendors are claiming that their devices can block Skype.
> Reading "An Analysis of the Skype Peer-to-Peer Internet Telephony
> Protocol"
> (http://www1.cs.columbia.edu/~library/TR-repository/reports/reports-2004/cucs-039-04.pdf),
> paper I fail to see how those claims can be true.
>
>
> Has anyone looked into blocking Skype?
>
>
> Thanks.
>
> --
> .signature: No such file or directory
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------
Received on May 17 2006

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]