Re: Blocking Skype with IOS

From: Iwan Hoogendoorn <iwan_at_ipexpert.com>
Date: Thu, 10 Sep 2009 13:26:52 +0200

Nice Article ...
Very nice if you don't want to use NBAR ... or can not use NBAR.

But I find the NBAR config a little bit easier ;-)

class-map match-any p2p
match protocol skype
!
policy-map block-p2p
class p2p
drop
!
int FastEthernet0
description PIX-facing interface
service-policy input block-p2p
!

So I am trying to find reasons here not to use NBAR exept that the
IOS/router platform is not supporting it...

-- 
Regards,
Iwan Hoogendoorn
CCIE #13084 (R&S / Security / SP)
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com
On Wed, Sep 9, 2009 at 8:00 PM, Nicholas Davitashvili <nickda_at_gmail.com> wrote:
> Hi guys,
> Here's an article we wrote about how to block Skype using IOS.
> http://www.4shared.com/file/129849696/4cd4ff14/Blocking_Skype_Using_IOS.html
>
> Please comment.
>
> Nick
> GREENNET
> Lat:  41043'25.46"N
> Long:  44045'45.60"E
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Thu Sep 10 2009 - 13:26:52 ART

This archive was generated by hypermail 2.2.0 : Sun Oct 04 2009 - 07:42:03 ART