Ask the Experts: How to stop Skype spam

Q: How can I stop Skype spam? My organisation uses it between offices, but I and some of my end-users are getting invitations to chat from people we have never met!

A: One of the best ways to avoid problems from software such as IM, P2P and VoIP is to stop the client software running at all. Many of these programs are specifically designed to disguise their network traffic, and the content of that traffic, to make them easier to deploy in the face of firewalls and other security systems. This means that their use may be incommensurate with good security practice on your network.

Of course, blocking the Skype client means that you can't actually use it any more, so this solution isn't for everyone. Nevertheless, those who are blocking these programs aren't at the extreme edge of security thinking. A poll by Sophos late in 2006 shows that 86% of administrators were interested in blocking VoIP applications (63% said blocking was essential), 87% wanted to block P2P (79% said essential), and 86% wanted to block IM (60% said essential).

If you do want to use IM, P2P or VoIP, consider allowing their use only over a virtual private network (VPN) interconnecting staff members. This means you can chat to your colleagues who are part of the same business network, but without becoming part of the largely unregulated global network of IM, VoIP or file sharing users worldwide.

Paul Ducklin is Sophos' Head of

Requires Free Membership to View

technology for the Asia Pacific.

Ask The Experts is TechTarget's FREE advice service. Send questions to editor@techtarget.com.au and we will forward them to our panel of experts who provide answers here on the site.

This was first published in May 2007

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.