[ QUOTE ] is it possible to deny skype with astaro?
[/ QUOTE ] look in the ids forums for similar issues with p2p and IM. Skype was founded by the same person who founded Kazaa. Kazaa and others of its ilk know how to find open ports(like port 80) and use it for their comms. The short answer is..not with the firewall. Your best solution is a well laid out and strictly enforced netowrk policy.
I have to disagree :-) Sure you can deny/block Skype using ASL... when following one "simple" rule:
Do not allow any outgoing traffic from your LAN destined to "ANY" without forcing it to use a proxy.
When you configure e.g. the (web) proxy to use authentication and you block the CONNECT method than you can be quite sure that Skype will not work.
techno.kid
[/ QUOTE ] Along with qute a few other things. You are correct in this but the question was using IDS which from experience it won't stop it. For sites that have authentication setup this works.