Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

Re: blocking SkyPE?
From: Valdis.Kletnieks () vt edu
Date: Tue, 25 Jan 2005 00:13:36 -0500

On Tue, 25 Jan 2005 10:05:23 +0700, Alain Fauconnet said:

I would certainly not call our users a legion of techies (sometimes I wish
they'd be more techies than they are). Setting up a VPN would require
having control of a box outside of our campus, which is not likely for
the vast majority of them. Even if some can still get through,
blocking 80+% of the current SkyPE users is good enough for me.

For those of you playing along at home, the actual requirement to set up a VPN
is merely that they know somebody who has control of a box outside the campus
(or even know where to find a tunnel broker).  And Alain is probably quite
correct that even that lower standard will stop 80% and be sufficient for his
needs.

But you need to remember the difference, in case you need *better* than 80%,
and your users are either more clued or they know more clued people.....

How to give the firewall admin indigestion:  Do your dirty work via IPv6, and
use a V6-over-V4 tunnel broker to get out to your remote site... :)

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]