i have blocked myspace. here's how to do it. echo "<a href="http://127.0.0.1">127.0.0.1</a> <a href="http://www.myspace.com/">www.myspace.com</a>" | sudo tee -a /etc/hosts i dont believe the person is smart enough to use instant message from a website, but if i need to, ill start blocking all those websites. how can i use block the instant messengers with iptables? be more specific on how to do it please. what's the command? yahoo uses port 5050 for logging in with the server for IM, so how can I block that? There should be one command to do it instead of installing squid and a bunch of other software. I just blocked websites without installing squid, so please don't suggest it. <div>On 9/1/06, Gabriel M Dragffy <<a href="mailto:dragffy@yandex.ru">dragffy@yandex.ru</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Thu, 2006-08-31 at 23:09 -0500, Chris Lemire wrote: > Is there any better way to block websites than using iptables? I would > like to block all website's on the myspace server. I'd also like to > block all instant messaging chatting from this computer. This computer > is also running windows in VMware server, so I'd like to block myspace > from being used from it too. If I use iptables to block myspace, it > will block it from any web browser even if the web browser is IE6 > running in VMware Server right? I got this ip using ping. How can I > block all of it sending and coming to this computer? > > ubuntu@ubuntu:~$ ping <a href="http://www.myspace.com">www.myspace.com </a> > PING <a href="http://www.myspace.com">www.myspace.com</a> (<a href="http://216.178.32.51">216.178.32.51</a>) 56(84) bytes of data. > 64 bytes from <a href="http://216.178.32.51">216.178.32.51</a>: icmp_seq=1 ttl=244 time=115 ms > 64 bytes from <a href="http://216.178.32.51">216.178.32.51</a>: icmp_seq=2 ttl=244 time=156 ms > > --- <a href="http://www.myspace.com">www.myspace.com</a> ping statistics --- > 2 packets transmitted, 2 received, 0% packet loss, time 1005ms > rtt min/avg/max/mdev = 115.457/136.140/156.823/20.683 ms > ubuntu@ubuntu:~$ You're right about IP tables, and if you don't have too many IPs that you'd like to filter it's probably easiest, certainly much easier than configuring your own proxy server. To make configuring IPTABLES easier I'd recommend you take a look at firehol in my opinion it's the best thing sinced sliced bread for taking care of firewall rules, it can even accept normal IP tables commands but it has it's own blacklist too. Blocking IM from the computer may be more difficult. You could configure the firewall to only allow certain outgoing services such as https/http, but then most IM clients can use and outbound connection with that if you configure them right. You may have to also blacklist the various destination IPs for the chat clients. -- ubuntu-users mailing list <a href="mailto:ubuntu-users@lists.ubuntu.com">ubuntu-users@lists.ubuntu.com</a> <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a> </blockquote> </div>