Results 1 to 6 of 6

Thread: Some answers about ettercap filters ! :)

  1. #1
    Just burned his ISO
    Join Date
    Mar 2009
    Posts
    2

    Default Some answers about ettercap filters ! :)

    Hey guys..

    I want to block the MSN Messenger and some sites in my internal network. I'm using the ettercap with filters and arp, to block site, i use:

    if (search(DECODED.data, "orkut.com")) {
    msg("some one is talking about us...\n");
    drop();
    kill();
    }

    It functions correctly. Now how I block the MSN Messenger? I need to block some ports.. (1863, 6891-6900, 6901 TCP // 1863, 5190, 6901 UPD I think)

    Thanks for your help, and sorry my poor english.

  2. #2
    Good friend of the forums
    Join Date
    Feb 2009
    Posts
    356

    Default

    mitm to block services for your network? First time I see mitm being used that way... it's like ... well... there's nothing like it You seriously could not come up with a better solution? Like... using your firewall for that? Block outbound traffic?

  3. #3
    Just burned his ISO
    Join Date
    Mar 2009
    Posts
    2

    Default

    How I make this?

  4. #4
    bogue
    Guest

    Default

    Quote Originally Posted by slxhw View Post
    How I make this?
    It's very easy.

    if (ip.proto == TCP && tcp.src == 1863) {
    drop();
    kill();
    msg("MSNMS Not Allowed Here!\n");
    }

    Or if you need to do it by IP:

    if (ip.src == '205.188.210.231' || ip.dst == '205.188.210.231') {
    drop();
    kill();
    msg("AIM Not Allowed Here!\n");
    }

  5. #5
    Good friend of the forums
    Join Date
    Feb 2010
    Posts
    328

    Default

    lolz
    setup snort / snortsam

    snortsam.net

    http://rmccurdy.com/scripts/snortupdate.sh.txt

  6. #6
    Junior Member kooze's Avatar
    Join Date
    May 2008
    Posts
    87

    Default

    Quote Originally Posted by operat0r View Post
    lolz
    setup snort / snortsam

    snortsam.net

    http://rmccurdy.com/scripts/snortupdate.sh.txt
    snort = bypassable to one with knowledge

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •