From owner-freebsd-hackers@FreeBSD.ORG  Thu Feb 21 17:08:28 2013
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by hub.freebsd.org (Postfix) with ESMTP id 63C777BD
 for <freebsd-hackers@freebsd.org>; Thu, 21 Feb 2013 17:08:28 +0000 (UTC)
 (envelope-from utisoft@gmail.com)
Received: from mail-ie0-x22b.google.com (mail-ie0-x22b.google.com
 [IPv6:2607:f8b0:4001:c03::22b])
 by mx1.freebsd.org (Postfix) with ESMTP id 320BB7AA
 for <freebsd-hackers@freebsd.org>; Thu, 21 Feb 2013 17:08:28 +0000 (UTC)
Received: by mail-ie0-f171.google.com with SMTP id 10so11643913ied.30
 for <freebsd-hackers@freebsd.org>; Thu, 21 Feb 2013 09:08:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:x-received:in-reply-to:references:date:message-id
 :subject:from:to:cc:content-type;
 bh=sLeI+9cB4gEAwLFR+OtvP/W3y7ro+EUZRbcadN/2ThE=;
 b=HGQ8WDlTFJmlDLroghw4GClI+sXFbaNGGB5dYCFkegg8CP909SRgeV25mAW/EjB6qN
 E34SoP6Cfk+hSip1RaV8jfT0RUKiEyoXUWVUwYlS6omnBQtUo4mt9+2hCIs14rB8rIur
 1fRfRKnAULAHgtwUBbFVXojjWi9lR3H/OC8zu32JZQ01g/qwa7qrnUtFjTyhN0sVAN59
 22No9PyrzbW9+Frq6AG0pDpVsWq5Vfmgv++4esfVGY807XM/jNMEEO+39kWGFYcD2hNk
 mQ7qQpkbXyfwxvWP4c6hIMn1Hsg5OvovzXJOUrIYrbJ5rI/tuittQuvwLzEnsY+TsLHs
 iZBw==
MIME-Version: 1.0
X-Received: by 10.42.121.14 with SMTP id h14mr11202615icr.27.1361466507833;
 Thu, 21 Feb 2013 09:08:27 -0800 (PST)
Received: by 10.64.63.12 with HTTP; Thu, 21 Feb 2013 09:08:27 -0800 (PST)
Received: by 10.64.63.12 with HTTP; Thu, 21 Feb 2013 09:08:27 -0800 (PST)
In-Reply-To: <alpine.BSF.2.00.1302211719320.67298@wojtek.tensor.gdynia.pl>
References: <alpine.BSF.2.00.1302211719320.67298@wojtek.tensor.gdynia.pl>
Date: Thu, 21 Feb 2013 17:08:27 +0000
Message-ID: <CADLo83_kXz9DtKxzKtFBHgZSSubA88xPtqyWjAwmuzVA=tHWbg@mail.gmail.com>
Subject: Re: blocking teamviewer trojan
From: Chris Rees <utisoft@gmail.com>
To: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
Content-Type: text/plain; charset=ISO-8859-1
X-Content-Filtered-By: Mailman/MimeDel 2.1.14
Cc: freebsd-hackers@freebsd.org
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2013 17:08:28 -0000

On 21 Feb 2013 16:22, "Wojciech Puchar" <wojtek@wojtek.tensor.gdynia.pl>
wrote:
>
> anyone have tested method on doing this?
>
> tried blocking port 5938 as well as teamviewer.com domain in squid (and
all port 80 traffic is already forwarded to squid).
>
> Still doesn't work.
>
> thanks for any help.

You would have better luck on a Windows security list.

This list is for development of FreeBSD.

Chris