Asus RT-AC3200 needs to block Skype

oxicottin

Distinguished
Dec 29, 2013
35
0
18,540
Hello, I have a RT-AC3200 router which I had purchased because it had easy parental adjustments and setup and I have 3 girls with kids coming in and out so I can set up a timed guest network and do a lot of stuff. Well lately my oldest has been Skyping on her laptop with and older kid from Xbox and I dont like it and I want to block Skype on my router and wondered how.
 
http://www.tomshardware.com/answers/id-2393412/block-skype-wif-router.html

Reading through that, seems hard to do since skype can use web ports if other ones are blocked, and blocking port 80 would block all web traffic.

I think you need to either have a serious talk about chatting with older boys and the dangers of abduction, human trafficking, etc, with your daughter or take away internet access.

If you tell them not to do it, and they still do, simply blocking them from using Skype won't teach them a lesson. Removing all internet access or all electronic devices may.

 
Skype used to be easier to block before microsoft got it. There are lots of parts to skype not just VoIP so it now uses lots of different locations.

Just blocking skype.com and skype.net does little good, would likely just make it hard to get it installed but once its installed it use lots of other sites.

This is actually really hard because the IP addresses it uses are different depending on where you live. It also can change.

If I had to do this I would run wireshark on my pc. Then make sure nothing at all running on the pc and launch skype. Run though the various things you can do on skype. Watch the ip addreses it uses and keep blocking them until you break it. You may have to test this again from time to time in case the ip addresses got changed.

There are services that keep lists of ip used by skype but this is generally a paid service much like how you get lists of vpn or porn sites so you can block them at a company.
 
Skype uses p2p technology, with dynamic ports and servers. So you won't be able to block it via blocking IPs or blocking Ports.

The solution is to deploy an 17-layer firewall system or internet content filtering program(ie: WFilter ICF).

These programs have the ability to identify and block skype traffic with signature matching.