I had this issue of trying to disable Google Talk on some of the workstations. Disabling ports 5222-5223 and port 443 did the job, but it also prevented Gmail from working as well as some other unrelated websites. The DSL router did not let me prevent connection to specific address (chatenabled.mail.google.com).
Solution
Not sure if it is perfect (needs tuning I am sure). I played little bit with iptables but this was not "straight talk", so I installed Firestarter via Synaptic.
Upon installation the Firestarter icon appears under Internet menu in the Applications. Click forward through initial setup wizard.
At the end, click on Save and it will start the Firestarter firewall and monitor.
In the main window, switch to Policy tab:
Select Outbound traffic policy, and click on the Add rule button (marked with "+"):Put "chatenabled.mail.google.com" in the IP host field (without "" characters).
Click on green check mark to apply the policy. After that, the Google Talk will be disabled without disabling Gmail and port 443.
After this you can close Firestarter and it will still keep blocking Google talk and remember the setting after computer restart.
2 comments:
One thing to pay attention here is that with Firestarter you might block some services (a good example is sharing printer). If you have issues and feel Firestarter is responsible. Open Firestarter, and watch for events. You can easily configure (allow/disable) different services and better set the firewall to match your needs.
This very well blocked Gogle Talk from Gmail. However, Pidgin (the default Ubuntu massinger) would still go through. In addition, you need to add the following to Outbound traffic policy:
- talk.google.com
- talkx.l.google.com
With these two addresses blocked even Pidgin (via XMPP) would not work.
Post a Comment