MikroTik

Hello ,

I have trouble with Skype blocking . Does anyone solved it ?

Thank You
Linas

Can't be done. To quote Normis:

skype works with no problem. if RouterOS would be able to block skype, that would be something newsworthy Make sure there is no other problem in your network

it's possible with layer 7 filtering avaible in router os version 3.x

not completely. you can only block calls and some other things, but even that works like 70% of the time.

how to block these 70%?

we manage a small school network with 80pcs. ros L.6 with hotspot. how to block skype?

It could be possible with Layer7,
http://wiki.mikrotik.com/wiki/L7

As well you may look at other forum topics about Layer 7.

thank you, sergejs,
obviously l7 is the only way to do smt.

Skype changes its patterns every version, only weak point is authentication - block access to authentication servers, but it is very similar to protect something against the flood, as soon as water gets trough one point it is all over .

I tried several times and failed each time. Maybe now when MicroSoft got Skype under its wing they will screw this up.

Maybe now when MicroSoft got Skype under its wing they will screw this up.

I was thinking the same

I've worked for some time in the UAE where I know that the ISP's spend a *lot* of money to block Skype. They generally achieve their goal (after spending a *lot* of money). The end result... the user just uses a VPN to bypass the filter!

You could do something funky like create a mangle filter that marks random (or nth) outbound packets with 'connection-bytes' greater than (say) 100kb and place them into a particularly slow queue (say 10kbps). That would really mess with the RTP stream, but would have little impact on day-to-day browsing. Of course, theory rather than practice!

Otherwise, it is tricky as Skype uses random ports and encrypted comms.

Rich

I still can't understand from what planet people are coming that want to deliver internet services but at the same time block several parts of it?
Why do you want to block a service that in fact also helped making internet popular by giving people around the globe the possibility to communicate with each other in real time against almost no costs?