[v7.386] tencent-qq and skype getting through

Hi,
I suspect the tencent_qq is a misclassificstion of packet type, because I have seen a small number of these going through the firewall for a while, usually in the order of 1 to 10 packets. They are usually associated with msn.
I have tencent_qq blocked in IM.

Recently I have noticed a number of skype packets going through the ASG even though these are blocked in the IM. The quantities involved would lead me to believe that this is not a mis-classification.

Sven has a recent copy of my ASG configuration.

Ian M[:S][[:)]][[:)]]

0 theproto over 15 years ago

I also get a number of these "tencent_qq" packets getting through some days however this is most definitely being used in my home network where I am seeing this.

I am not sure what the ASG is using to classify the packets. Is it based on destination, port, traffic type or a combination?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BarryG over 15 years ago in reply to theproto

I also get a number of these "tencent_qq" packets getting through some days however this is most definitely being used in my home network where I am seeing this.

Did you mean to day definitely NOT being used?

And is Skype not being used too?

I believe the IM features in Astaro use Snort, which likely means it's looking at the packet payload.

Barry
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 theproto over 15 years ago in reply to BarryG

I mean that they are never used on this network.

I believe this is an upstream snort issue as well.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel