How to restrict intranet use QQ Internet?

QQ client Log in when the use of the external network port number of UDP port 8000, TCP port 80 and 4,433 ports, generally do not recommend the direct blocking of 80 and 443 ports, unless you do not want to browse the Web page. So our approach is to the router's Domain name filter and IP filter two functions combined to use.

In the following introduction, the use of the QQ version is QQ2010.

1. Set Domain name filter:

QQ connection through the view of information, the current QQ login to use the server's domain name information is as follows:

UDP Server:

Sz.tencent.com

Sz2.tencent.com

Sz3.tencent.com

Sz4.tencent.com

Sz5.tencent.com

Sz6.tencent.com

Sz7.tencent.com

Sz8.tencent.com

Sz9.tencent.com

TCP Server:

Tcpconn.tencent.com

Tcpconn2.tencent.com

Tcpconn3.tencent.com

Tcpconn4.tencent.com

Tcpconn5.tencent.com

Tcpconn6.tencent.com

It also uses information about qq.com, so you can set domain name filtering on routers to prevent domain name resolution on these servers.

Set domain name filtering on the router to prevent domain name resolution for these servers:

1) to open the domain name filter

2) filter the domain name request to the tencent.com,qq.com

If you set the domain name filter has been able to successfully prohibit QQ landing, you do not need to set IP address filtering, or you need to continue to set IP address filtering.

2. Set IP address filtering:

First you must find which IP addresses you need to filter, and we can get the IP address of the login server that needs to be filtered by the following methods:

When QQ landing success, enter QQ settings:

Click on "Network Connection", see "Login Server", the IP address shown here is the IP address we want to filter.

And then we start setting up IP address filtering:

1 to open the IP address filtering settings, and then try to login QQ, through the way above to continue to look for the IP address of the server can be landed, will be able to access the IP Address section continue to add in the filter out, the process of circulation until QQ can not be landed.

Here we filter the following IP address paragraph, QQ can not login: through the above set domain name filtering and IP address filtering, QQ landing can be limited. However, it should be noted that in setting IP address filtering, we filter the IP address segment, so that some of the normal is not a QQ server IP address also filtered out. If the "Destination IP address for the connection is also filtered", we can simply split the address segment that we have previously restricted into segments, excluding the IP address we need to access.

Attached QQ server address:

219.133.40.15 218.17.209.23 202.104.129.252 218.18.95.153 202.104.129.251

61.144.238.145 202.104.129.253 61.141.194.203 202.104.129.254 218.18.95.165

61.144.238.146 219.133.40.91 211.248.99.252 218.17.217.66 61.144.238.156

219.133.40.89 219.133.40.115 219.133.40.90 219.133.40.113 219.133.40.114

210.22.12.126 61.141.194.223 61.172.249.135 202.104.128.233 202.96.170.164

218.17.217.103 218.66.59.233 61.141.194.207 202.96.170.163 202.96.170.166

202.96.140.18 202.96.140.119 202.96.140.8 202.96.140.12 218.18.95.221

219.133.45.15 61.141.194.224 218.17.209.42 61.141.194.227 218.18.95.171

219.133.49.6 219.133.49.73 219.133.48.56 219.133.40.215 219.133.38.132

219.133.38.30 219.133.40.177 219.133.38.232 219.133.38.29 219.133.48.88

219.133.38.31 219.133.60.34

QQ server is divided into three categories:

1, UDP 8000 Port class 13: The fastest, most servers.

QQ Online will send UDP packets to these 11 servers and choose one of the fastest reply as a connection server.

These 6 server names all start with sz, domain suffix is tencent.com, domain name and IP correspond to

SZ sz2:61.144.238.145 61.144.238.146 61.144.238.156

Sz3 sz4 sz6 sz7:202.104.129.251 202.104.129.254 202.104.129.252

202.104.129.253

sz5:61.141.194.203 202.96.170.166 218.18.95.221 219.133.45.15

61.141.194.224 202.96.170.164

2, TCP HTTP connection server 4, using HTTP 80 and 443 port connection

All 4 server names begin with Tcpconn, domain suffix is tencent.com, domain name corresponds to IP

Tcpconn tcpconn3 218.17.209.23

Tcpconn2 tcpconn4 218.18.95.153 61.141.194.227 218.18.95.171

3, member VIP Landing server, using HTTP 443 secure connection

Server IP 218.17.209.42

Know these server address, all blocked on OK, who also can not on QQ, agent software, another talk.

If you can, then the new server is added! See a man kill one!

QQ: In the current default port is 4000, the transfer of UDP, but, will also use 1080,8000,8001,28120 are used UDP transmission. All Forbidden!