Only skype

[agelmi]

is there a way to permit to those who don't have any account to use skype and the "free exception site" both freely ?
Otherwise, is there a way to let to users with valid accounts to use internet only to some sites and permit the use of skype?
_________________
Thanks,
Angelo

[alan]

1) Currently, Exception Free Websites feature will allow domain (http) or IP only. As Skype is peer-to-peer service and IP is dynamic, we cannot white-list it.

2) To allow only for some sites after login (i.e. content filtering), see http://www.patronsoft.com/forum/viewtopic.php?t=1095 . As for Skype, you need to rely on the 3rd party router's filtering ability to recognize Skype packets.
_________________
~ Patronsoft Limited ~

[agelmi]

1) I was afraid of
2) In that case, can surf control allow some "firstspot user" without restriction and some other only for skype and white-listed sites?
In your opinion, could it be possible to install surfcontrol or other conten filtering on a virtual machine on the same firstspot server?
_________________
Thanks,
Angelo

[alan]

2) This is difficult, since your content filtering software does not recognize FirstSpot user concept. As a workaround, you can define multiple network segments, where you allow one segment without restrictions while the other segment can only use skype and white-listed sites. In this case, your content filtering software can recognize the originate IP to segregate the users.

3) Yes, it should work. In fact you can run FirstSpot and ISA in the same machine. See http://patronsoft.com/forum/viewtopic.php?p=5496#5496 for details.
_________________
~ Patronsoft Limited ~

[agelmi]

What if i get a linux machine with a firewall distro (endian or ipcop) in a particular subnet performing a content filter?
I'd need to allows crew staff to connect into internet only onto some sites (ie using FP's free exception sites ) AND skype
I'd let them to connect to Firstspot by a AP with a particular wep key, through a subnet, performing a content filter before firstspot.
I saw that Skype packets works on port 80, so how can I identify them ?

Thank You for your very professional help
_________________
Thanks,
Angelo

[alan]

Using Linux as content filtering is fine. Just as stated in http://www.patronsoft.com/forum/viewtopic.php?t=1095 , you need to configure your Linux as transparent proxy.

Just by looking at port 80 is not enough, your filtering software needs to inspect the packet content somehow. Please refer to your filtering software documentation to confirm whether they support Skype packets.
_________________
~ Patronsoft Limited ~