Full Disclosure mailing list archives

Re: blocking SkyPE?


From: Valdis.Kletnieks () vt edu
Date: Tue, 25 Jan 2005 00:13:36 -0500

On Tue, 25 Jan 2005 10:05:23 +0700, Alain Fauconnet said:

I would certainly not call our users a legion of techies (sometimes I wish
they'd be more techies than they are). Setting up a VPN would require
having control of a box outside of our campus, which is not likely for
the vast majority of them. Even if some can still get through,
blocking 80+% of the current SkyPE users is good enough for me.

For those of you playing along at home, the actual requirement to set up a VPN
is merely that they know somebody who has control of a box outside the campus
(or even know where to find a tunnel broker).  And Alain is probably quite
correct that even that lower standard will stop 80% and be sufficient for his
needs.

But you need to remember the difference, in case you need *better* than 80%,
and your users are either more clued or they know more clued people.....

How to give the firewall admin indigestion:  Do your dirty work via IPv6, and
use a V6-over-V4 tunnel broker to get out to your remote site... :)

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread: