Penetration Testing mailing list archives
RE: Skype
From: "Jason M. Beauford" <jbeauford () subropartners com>
Date: Thu, 27 Dec 2007 13:26:21 -0500
Look at the Skype website for details on ports: http://www.skype.com/help/guides/firewalls/technical.html Default Deny Egress traffic should block all traffic except that which is explicitly allowed. Good rule but sometimes difficult to get going, in the beginning. I've used Websense with PIX integration and it effectively blocked Skype traffic. I've also used MS Group Policy to deny access to skype.exe on all systems, but this is easily circumvented should the user rename the executable. However, my users do not have rights to install software or to modify anything below the %PROGRAMFILES% dir. Again this is circumvented should they bring it in on a USB key, but if you lock down USB access as well, they wont be able to initialize the drive. jmb -----Original Message----- From: Misiu [mailto:Misiu_ () gmx de] Sent: Wednesday, December 26, 2007 6:15 PM To: Nikolaj; pen-test () securityfocus com Subject: Re: Skype
Any ideas how to profile skype traffic and possibly block it? I've heard rumors that cisco content switch can detect skype traffic and block in 90% of the cases? Any ideas on this topic and general skype security risks for the corporate environment?
Hello, I read recently about blocking skype. BlueSocket Proxy Applyance http://bluecoat.com/ can do it and CheckPoint Interspect http://www.checkpoint.com/products/interspect/. And there are some others but I don't remember the names. Laters, misiu -- No discipline is ever requisite to force attendance upon lectures which are really worth the attending. -- Adam Smith, "The Wealth of Nations" GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Re: Skype, (continued)
- Re: Skype Justin Ferguson (Dec 13)
- RE: Skype Ofer Shezaf (Dec 13)
- Re: Skype ilaiy (Dec 13)
- Re: Skype Carlos Moro Garci'a (Dec 13)
- Re: Skype Jason (Dec 17)
- Re: Skype Erkan KAHRAMAN (Dec 13)
- Re: Skype James Matthews (Dec 13)
- Re: Skype Misiu (Dec 27)
- Re: Skype krymson (Dec 13)
- FW: Skype Dobby, Wayne (Perth) (Dec 13)
- RE: Skype Jason M. Beauford (Dec 27)