@@ -0,0 +1,1003 @@
+%22%22%22%0ARestrict skype.%0AThis prevents most outgoing connections, which may trigger some corporate%0Afirewalls. This is supposed to prevent your computer from becoming a supernode.%0A%0AIn order to use this, you must create a group %22skype%22 and then set skype to%0A%22setgid skype%22 so it is run as group skype. (Alternatively, you can use a%0Aseparate user to run skype as, and change --gid-owner to --uid-owner below)%0A%0AIf you just blindly add this ruleset, it will likely fail with %22Bad value%22.%0A%0AIf you want to further secure your Skype usage, you might want to also block%0Aaccess to any local IP addresses. It has been reported that skype can be%0Atricked into arbitrary connections. So it might allow access to private%0Aservices! You should migrate to an open source solution instead.%0A%22%22%22%0A# Low level iptables rules.%0Aiptables(Firewall.output, %22-p tcp -m owner --gid-owner skype -m multiport ! --dports 80,443 -j %25s%22 %25 Firewall.reject)%0Aiptables(Firewall.output, %22-p udp -m owner --gid-owner skype -j %25s%22 %25 Firewall.reject)%0A

Add skype example.