Bloquear Whatsapp!

iptables -I FORWARD -m string --algo bm --string "whatsapp.com" -j DROP

P.S deve bloquear as portas 5222 e 5223 no firewall ou se já utiliza política DROP inicialmente resolve também.

P.S: Essa solução funciona se o sujeito usar o wifi da empresa ae está mesma rede.

P.S 2: Tem um problema se o sujeito usar conexão 3G

No caso do P.S 2 teria que usar bloqueador de celular, entrou na empresa todos os celulares ficam sem sinal. Tem casos é preciso forçar mesmo.

Segue script que usa o iptables para bloquear
funciona da seguinte maneira:
no arquivo ips_permitidos coloque os IPs que poderão acessar o whatsapp

#ips_permitidos

#IPs comentados serão BLOQUEADOS

#192.168.10.2 #recepcao

192.168.10.3 #maq01

192.168.10.4 #server

#192.168.10.7 #notepamela

192.168.10.8 #wpdaniel

#192.168.10.9 #wppamela

#192.168.10.240 #assistencia

 

o arquivo ips_block a lista de ips usada pelo whatsapp (é bom atualizar de vez em quando em https://www.whatsapp.com/cidr.txt)

#whatsapp

5.153.52.248/29

50.22.194.224/27

50.22.198.204/30

50.22.210.32/30

50.22.210.128/27

50.22.225.64/27

50.22.231.32/27

50.22.235.248/30

50.22.240.160/27

50.23.90.128/27

50.97.57.128/27

75.126.39.32/27

108.168.174.0/27

108.168.176.192/26

108.168.177.0/27

108.168.180.96/27

108.168.254.65/32

108.168.255.224/32

108.168.255.227/32

119.81.51.216/29

158.85.0.96/27

158.85.5.192/27

158.85.73.128/27

158.85.73.176/28

173.192.212.200/30

173.192.219.96/27

173.192.219.128/27

173.192.222.160/27

173.192.231.32/27

173.193.205.0/27

173.193.230.96/27

173.193.230.128/27

173.193.239.0/27

173.193.247.192/27

174.36.194.48/28

174.36.208.128/27

174.36.210.32/27

174.36.251.192/27

174.37.199.192/27

174.37.217.64/27

174.37.231.64/27

174.37.243.64/27

184.173.136.64/27

184.173.147.32/27

184.173.161.64/32

184.173.161.160/27

184.173.173.116/32

184.173.179.32/27

192.155.193.0/28

192.155.212.192/27

198.11.193.182/31

198.11.212.0/27

198.11.217.192/27

198.11.251.32/27

198.23.80.0/27

198.23.86.224/27

198.23.87.64/27

208.43.115.192/27

208.43.117.79/32

208.43.117.136/32

208.43.122.128/27

208.43.244.168/29

 

e agora o script em shell que faz o bloqueio:

#!/bin/sh

#Bloquear acesso ao Facebook e Whatsapp

#daniel.uramg - 2014-02



IPS_ACCEPT=$(cut -f 1 -d" " /partition/ips_permitidos | grep -v ^#)



#Sub-rede interna

REDE_INTERNA="192.168.0.0/16"



#Cria nova regra BLOQUEIOS

iptables -N BLOQUEIOS



#Transfere o tráfego da rede interna para a regra

iptables -I FORWARD -s $REDE_INTERNA -j BLOQUEIOS



#Percorre o arquivo dos IPs para bloquear (ips_block) e coloca REJECT em todos os IPs da rede interna, exceto os liberados.

for i in `grep -v ^# /partition/ips_block`; do



    #O acesso dos IPs (que caíram na regra BLOQUEIOS) vai ser rejeitado

    iptables -A BLOQUEIOS -d $i -j REJECT



	

    #Percorre lista de IPs liberados e vai colocando ACCEPT neles

    for liberados in $IPS_ACCEPT; do

		iptables -I FORWARD -s $liberados -d $i -j ACCEPT

		echo "$clientes_liberados liberado em $i"

	done



done

 

este script consegui aqui mesmo no VOL para bloqueio do Facebook

não se esqueçam de amarrar o IP ao MAC de todos IPs da rede, pois o acesso vai ser liberado somente nos IPs especificados, e bloqueado em todos os demais IPs não vão conseguir acessar o whatsapp

criei um alias com alguns ips do whatsapp( que peguei aleatorio no PFtop) e ele bloqueio o envio, mais liberou receber( pq nao cadastrei todos os ips) e deixeu lento, pois a msg procura outra rota e demora mais chegar no destino.

O whatsapp utiliza as portas 5222 e 443, se

se vc limpar a tabela de iptables e fizer

################################
iptables -A FORWARD -p tcp --dport 443 -j REJECT
iptables -A FORWARD -p tcp --dport 5222 -j REJECT
###############################

Vai bloquear o whatsapp, o facebook e o facebook messenger
porem tbm vai bloquear qualquer acesso https, estou ainda trabalhando numa forma de liberar pelo menos o gmail, a busca do google e o youtube

Daniel, boa tarde.

Me desculpe a ignorância.... mas... rsrsrs.

esses nomes de arquivos que vc menciona (ips_permitidos) e (ips_block) vc coloca ele na inicialização do linux?
Vou vc coloca ele no squid??

È isso mesmo??

Forte abraços!

Fica na Paz do SENHOR!

JEAN

Precisei LIBERAR pra um cliente e fiz de outro modo.



####Criei uma chain chamada WHATSAPP
iptables -N WHATSAPP

####Depois direcionei o trafego
iptables -I FORWARD -j WHATSAPP

####Direcionei liberei as portas tcp e udp da 5222 e 5223
iptables -I WHATSAPP -p tcp --dport 5222 -j ACCEPT
iptables -i WHATSAPP -p tcp --dport 5223 -j ACCEPT
iptables -I WHATSAPP -p udp --dport 5222 -j ACCEPT
iptables -i WHATSAPP -p udp --dport 5223 -j ACCEPT

E por fim peguei os ips da lista desse endereço e liberei dentro da chain WHATSAPP
https://www.whatsapp.com/cidr.txt

iptables -I WHATSAPP -s ###TODOS IPS IPV4 DA LISTA### -j ACCEPT
iptables -I WHATSAPP -d ###TODOS IPS IPV4 DA LISTA## -j ACCEPT

Aqui funcionou.




MAAAAS Caso não funcione, tente implantar
iptables -I WHATSAPP -p tcp --dport 5228 -j ACCEPT
iptables -I WHATSAPP -p udp --dport 5228 -j ACCEPT
iptables -I WHATSAPP -p tcp --dport 443 -j ACCEPT
iptables -I WHATSAPP -p udp --dport 443 -j ACCEPT

###Depois vá no squid.conf e crie algumas acl
acl Safe_ports port 5222
acl Safe_ports port 5223
acl Safe_ports port 5228

acl DIRETO dstdomain whatsapp.net
acl DIRETO dstdomain whatsapp.com
no_cache deny DIRETO
always_direct allow DIRETO

Boa tarde amigos!
Primeiramente sou meio leiga em configuração de computadores. Segundo, eu uso o windows, nunca vi o linux.
Mas a minha chefe(mãe) me pediu para tentar bloquear o whatsapp no wi-fi da empresa, pois muitos funcionários estão abusando disso!
Será que alguém poderia me dar uma luz?
Desde já fico muito agradecida a todos!

Criei esse script já tem algum tempo, não sei se esta totalmente correto porem funciona.
Eu uso ele na empresa com o Cron, no horário de almoço dos funcionários eu rodo outro script p/ zerar essas regras, e assim que eles voltam do almoço o Cron executa esse script e bloqueia novamente.

Bloqueio whatsapp e facebook com liberação para range de Ips
Criar script e colocar na inicialização do Servidor ou no Agendado de tarefas -

PATH=/sbin:/usr/sbin:/bin:/usr/bin
iptables -I FORWARD -m string --algo bm --string "facebook.com" -j DROP
iptables -I INPUT -m string --algo bm --string "facebook.com" -j DROP
iptables -I FORWARD -m string --algo bm --string "akamaitechnologies.com" -j DROP
iptables -I FORWARD -s 204.0.54.195 -j DROP
iptables -I FORWARD -s 118.214.160.35 -j DROP
iptables -I FORWARD -s 31.13.24.0/21 -j DROP
iptables -I FORWARD -s 31.13.64.0/19 -j DROP
iptables -I FORWARD -s 31.13.64.0/24 -j DROP
iptables -I FORWARD -s 31.13.69.0/24 -j DROP
iptables -I FORWARD -s 31.13.70.0/24 -j DROP
iptables -I FORWARD -s 31.13.71.0/24 -j DROP
iptables -I FORWARD -s 31.13.72.0/24 -j DROP
iptables -I FORWARD -s 31.13.73.0/24 -j DROP
iptables -I FORWARD -s 31.13.76.0/24 -j DROP
iptables -I FORWARD -s 31.13.77.0/24 -j DROP
iptables -I FORWARD -s 31.13.75.0/24 -j DROP
iptables -I FORWARD -s 31.13.78.0/24 -j DROP
iptables -I FORWARD -s 31.13.79.0/24 -j DROP
iptables -I FORWARD -s 31.13.80.0/24 -j DROP
iptables -I FORWARD -s 66.220.144.0/20 -j DROP
iptables -I FORWARD -s 66.220.144.0/21 -j DROP
iptables -I FORWARD -s 66.220.149.11/16 -j DROP
iptables -I FORWARD -s 66.220.152.0/21 -j DROP
iptables -I FORWARD -s 66.220.158.11/16 -j DROP
iptables -I FORWARD -s 66.220.159.0/24 -j DROP
iptables -I FORWARD -s 69.63.176.0/21 -j DROP
iptables -I FORWARD -s 69.63.176.0/24 -j DROP
iptables -I FORWARD -s 69.63.184.0/21 -j DROP
iptables -I FORWARD -s 69.171.224.0/19 -j DROP
iptables -I FORWARD -s 69.171.224.0/20 -j DROP
iptables -I FORWARD -s 69.171.224.37/16 -j DROP
iptables -I FORWARD -s 69.171.229.11/16 -j DROP
iptables -I FORWARD -s 69.171.239.0/24 -j DROP
iptables -I FORWARD -s 69.171.240.0/20 -j DROP
iptables -I FORWARD -s 69.171.242.11/16 -j DROP
iptables -I FORWARD -s 69.171.255.0/24 -j DROP
iptables -I FORWARD -s 74.119.76.0/22 -j DROP
iptables -I FORWARD -s 173.252.64.0/18 -j DROP
iptables -I FORWARD -s 173.252.70.0/24 -j DROP
iptables -I FORWARD -s 173.252.96.0/19 -j DROP
iptables -I FORWARD -s 204.15.20.0/22 -j DROP
iptables -I FORWARD -s 173.252.110.0/18 -j DROP

#Range de Ips Liberadas Facebook
iptables -I FORWARD -m iprange --src-range 192.168.1.110-192.168.1.110 -j ACCEPT
iptables -I FORWARD -m iprange --dst-range 192.168.1.110-192.168.1.110 -j ACCEPT

#Bloqueio do Whatsapp
iptables -I FORWARD -m string --algo bm --string "whatsapp.com" -j DROP
iptables -I FORWARD -m string --algo bm --string "whatsapp.net" -j DROP
iptables -I FORWARD -s 17.173.66.102/24 -j DROP
iptables -I FORWARD -s 17.173.66.179 -j DROP
iptables -I FORWARD -s 158.85.58.23/24 -j DROP
iptables -I FORWARD -s 158.85.58.113 -j DROP
iptables -I FORWARD -s 158.85.58.122 -j DROP
iptables -I FORWARD -s 184.173.136.85 -j DROP
iptables -I FORWARD -s 184.173.136.66 -j DROP
iptables -I FORWARD -s 184.172.19.94 -j DROP
iptables -I FORWARD -s 184.173.136.91 -j DROP
iptables -I FORWARD -s 50.22.210.150 -j DROP
iptables -I FORWARD -s 50.22.213.141 -j DROP
iptables -I FORWARD -s 50.22.210.143 -j DROP
iptables -I FORWARD -s 184.173.136.74 -j DROP
iptables -I FORWARD -s 50.22.227.222 -j DROP
iptables -I FORWARD -s 184.173.136.94 -j DROP
iptables -I FORWARD -s 50.22.210.148 -j DROP
iptables -I FORWARD -s 184.173.136.72 -j DROP
iptables -I FORWARD -s 50.23.142.175 -j DROP
iptables -I FORWARD -s 184.173.136.77 -j DROP
iptables -I FORWARD -s 50.23.142.180 -j DROP
iptables -I FORWARD -s 50.22.210.145 -j DROP
iptables -I FORWARD -s 184.173.136.65 -j DROP
iptables -I FORWARD -s 50.22.235.126 -j DROP
iptables -I FORWARD -s 208.43.96.6 -j DROP
iptables -I FORWARD -s 50.22.210.130 -j DROP
iptables -I FORWARD -s 208.43.96.4 -j DROP
iptables -I FORWARD -s 50.22.210.128 -j DROP
iptables -I FORWARD -s 208.43.244.170 -j DROP
iptables -I FORWARD -s 184.172.19.84 -j DROP
iptables -I FORWARD -s 50.23.142.190 -j DROP
iptables -I FORWARD -s 184.173.136.76 -j DROP
iptables -I FORWARD -s 50.22.210.155 -j DROP
iptables -I FORWARD -s 184.173.136.88 -j DROP
iptables -I FORWARD -s 50.22.235.124 -j DROP
iptables -I FORWARD -s 50.22.210.136 -j DROP
iptables -I FORWARD -s 184.172.19.81 -j DROP
iptables -I FORWARD -s 184.173.136.83 -j DROP
iptables -I FORWARD -s 50.23.142.173 -j DROP
iptables -I FORWARD -s 184.173.136.90 -j DROP
iptables -I FORWARD -s 184.173.136.86 -j DROP
iptables -I FORWARD -s 50.22.213.142 -j DROP
iptables -I FORWARD -s 50.22.210.154 -j DROP
iptables -I FORWARD -s 184.172.19.69 -j DROP
iptables -I FORWARD -s 50.22.210.137 -j DROP
iptables -I FORWARD -s 208.43.97.156 -j DROP
iptables -I FORWARD -s 50.22.210.151 -j DROP
iptables -I FORWARD -s 184.173.136.95 -j DROP
iptables -I FORWARD -s 50.22.210.131 -j DROP
iptables -I FORWARD -s 50.22.227.220 -j DROP
iptables -I FORWARD -s 184.173.136.89 -j DROP
iptables -I FORWARD -s 184.172.19.64 -j DROP
iptables -I FORWARD -s 184.172.19.89 -j DROP
iptables -I FORWARD -s 50.22.210.144 -j DROP
iptables -I FORWARD -s 184.173.136.73 -j DROP
iptables -I FORWARD -s 184.173.136.80 -j DROP
iptables -I FORWARD -s 184.172.19.79 -j DROP
iptables -I FORWARD -s 184.172.19.66 -j DROP
iptables -I FORWARD -s 184.172.19.95 -j DROP
iptables -I FORWARD -s 50.23.142.162 -j DROP
iptables -I FORWARD -s 50.23.142.182 -j DROP
iptables -I FORWARD -s 184.173.136.81 -j DROP
iptables -I FORWARD -s 184.172.19.71 -j DROP
iptables -I FORWARD -s 184.173.136.82 -j DROP
iptables -I FORWARD -s 184.173.136.75 -j DROP
iptables -I FORWARD -s 50.23.142.163 -j DROP
iptables -I FORWARD -s 50.22.213.140 -j DROP
iptables -I FORWARD -s 184.173.136.79 -j DROP
iptables -I FORWARD -s 50.22.210.147 -j DROP
iptables -I FORWARD -s 50.23.142.174 -j DROP
iptables -I FORWARD -s 50.22.210.152 -j DROP
iptables -I FORWARD -s 50.22.210.141 -j DROP
iptables -I FORWARD -s 50.22.227.226 -j DROP
iptables -I FORWARD -s 50.22.210.142 -j DROP
iptables -I FORWARD -s 50.22.210.146 -j DROP
iptables -I FORWARD -s 50.23.142.169 -j DROP
iptables -I FORWARD -s 50.23.142.170 -j DROP
iptables -I FORWARD -s 184.172.19.65 -j DROP
iptables -I FORWARD -s 50.22.210.33 -j DROP
iptables -I FORWARD -s 50.22.227.224 -j DROP
iptables -I FORWARD -s 184.173.136.71 -j DROP
iptables -I FORWARD -s 50.22.210.149 -j DROP
iptables -I FORWARD -s 50.23.142.160 -j DROP
iptables -I FORWARD -s 50.23.142.177 -j DROP
iptables -I FORWARD -s 50.22.210.153 -j DROP
iptables -I FORWARD -s 208.43.244.171 -j DROP
iptables -I FORWARD -s 208.43.244.174 -j DROP
iptables -I FORWARD -s 184.173.136.64 -j DROP
iptables -I FORWARD -s 50.23.142.181 -j DROP
iptables -I FORWARD -s 50.22.210.158 -j DROP
iptables -I FORWARD -s 50.22.199.44 -j DROP
iptables -I FORWARD -s 184.173.136.84 -j DROP
iptables -I FORWARD -s 208.43.244.169 -j DROP
iptables -I FORWARD -s 184.172.19.92 -j DROP
iptables -I FORWARD -s 50.22.203.212 -j DROP
iptables -I FORWARD -s 50.22.227.227 -j DROP
iptables -I FORWARD -s 50.22.210.135 -j DROP
iptables -I FORWARD -s 184.172.19.86 -j DROP
iptables -I FORWARD -s 50.22.227.225 -j DROP
iptables -I FORWARD -s 208.43.96.7 -j DROP
iptables -I FORWARD -s 208.43.244.168 -j DROP
iptables -I FORWARD -s 174.37.240.116 -j DROP
iptables -I FORWARD -s 184.173.136.69 -j DROP
iptables -I FORWARD -s 50.23.142.191 -j DROP
iptables -I FORWARD -s 184.172.19.70 -j DROP
iptables -I FORWARD -s 208.43.96.5 -j DROP
iptables -I FORWARD -s 184.173.136.70 -j DROP
iptables -I FORWARD -s 50.22.235.127 -j DROP
iptables -I FORWARD -s 50.22.198.205 -j DROP
iptables -I FORWARD -s 50.22.210.132 -j DROP
iptables -I FORWARD -s 184.173.136.93 -j DROP
iptables -I FORWARD -s 50.22.213.143 -j DROP
iptables -I FORWARD -s 184.173.136.67 -j DROP
iptables -I FORWARD -s 50.22.210.138 -j DROP
iptables -I FORWARD -s 184.173.136.68 -j DROP
iptables -I FORWARD -s 50.23.142.168 -j DROP
iptables -I FORWARD -s 208.43.244.175 -j DROP
iptables -I FORWARD -s 50.23.142.176 -j DROP
iptables -I FORWARD -s 184.173.136.87 -j DROP
iptables -I FORWARD -s 50.22.210.129 -j DROP
iptables -I FORWARD -s 50.22.210.134 -j DROP
iptables -I FORWARD -s 50.23.142.161 -j DROP
iptables -I FORWARD -s 208.43.244.172 -j DROP
iptables -I FORWARD -s 50.22.210.32 -j DROP
iptables -I FORWARD -s 50.22.210.133 -j DROP
iptables -I FORWARD -s 50.22.235.125 -j DROP
iptables -I FORWARD -s 50.22.210.159 -j DROP
iptables -I FORWARD -s 17.173.66.180 -j DROP
iptables -I FORWARD -s 17.172.232.150 -j DROP
iptables -I FORWARD -s 17.173.66.181 -j DROP
iptables -I FORWARD -s 158.85.58.9 -j DROP
iptables -I FORWARD -s 158.85.58.58 -j DROP
iptables -I FORWARD -s 17.173.66.104 -j DROP
iptables -I FORWARD -s 158.85.58.36 -j DROP
iptables -I FORWARD -s 17.143.162.225 -j DROP
iptables -I FORWARD -s 17.143.162.225 -j DROP
iptables -I FORWARD -s 158.85.58.71 -j DROP
iptables -I FORWARD -s 17.172.232.61 -j DROP
iptables -I INPUT -s 5.153.52.248/29 -j DROP
iptables -I INPUT -s 50.22.194.224/27 -j DROP
iptables -I INPUT -s 50.22.198.204/30 -j DROP
iptables -I INPUT -s 50.22.210.32/30 -j DROP
iptables -I INPUT -s 50.22.210.128/27 -j DROP
iptables -I INPUT -s 50.22.225.64/27 -j DROP
iptables -I INPUT -s 50.22.231.32/27 -j DROP
iptables -I INPUT -s 50.22.235.248/30 -j DROP
iptables -I INPUT -s 50.22.240.160/27 -j DROP
iptables -I INPUT -s 50.23.90.128/27 -j DROP
iptables -I INPUT -s 50.97.57.128/27 -j DROP
iptables -I INPUT -s 75.126.39.32/27 -j DROP
iptables -I INPUT -s 108.168.174.0/27 -j DROP
iptables -I INPUT -s 108.168.176.192/26 -j DROP
iptables -I INPUT -s 108.168.177.0/27 -j DROP
iptables -I INPUT -s 108.168.180.96/27 -j DROP
iptables -I INPUT -s 108.168.254.65/32 -j DROP
iptables -I INPUT -s 108.168.255.224/32 -j DROP
iptables -I INPUT -s 108.168.255.227/32 -j DROP
iptables -I INPUT -s 119.81.51.216/29 -j DROP
iptables -I INPUT -s 158.85.0.96/27 -j DROP
iptables -I INPUT -s 158.85.5.192/27 -j DROP
iptables -I INPUT -s 158.85.73.128/27 -j DROP
iptables -I INPUT -s 158.85.73.176/28 -j DROP
iptables -I INPUT -s 173.192.212.200/30 -j DROP
iptables -I INPUT -s 173.192.219.96/27 -j DROP
iptables -I INPUT -s 173.192.219.128/27 -j DROP
iptables -I INPUT -s 173.192.222.160/27 -j DROP
iptables -I INPUT -s 173.192.231.32/27 -j DROP
iptables -I INPUT -s 173.193.205.0/27 -j DROP
iptables -I INPUT -s 173.193.230.96/27 -j DROP
iptables -I INPUT -s 173.193.230.128/27 -j DROP
iptables -I INPUT -s 173.193.239.0/27 -j DROP
iptables -I INPUT -s 173.193.247.192/27 -j DROP
iptables -I INPUT -s 174.36.194.48/28 -j DROP
iptables -I INPUT -s 174.36.208.128/27 -j DROP
iptables -I INPUT -s 174.36.210.32/27 -j DROP
iptables -I INPUT -s 174.36.251.192/27 -j DROP
iptables -I INPUT -s 174.37.199.192/27 -j DROP
iptables -I INPUT -s 174.37.217.64/27 -j DROP
iptables -I INPUT -s 174.37.231.64/27 -j DROP
iptables -I INPUT -s 174.37.243.64/27 -j DROP
iptables -I INPUT -s 184.173.73.176/28 -j DROP
iptables -I INPUT -s 184.173.136.64/27 -j DROP
iptables -I INPUT -s 184.173.147.32/27 -j DROP
iptables -I INPUT -s 184.173.161.64/32 -j DROP
iptables -I INPUT -s 184.173.161.160/27 -j DROP
iptables -I INPUT -s 184.173.173.116/32 -j DROP
iptables -I INPUT -s 184.173.179.32/27 -j DROP
iptables -I INPUT -s 192.155.193.0/28 -j DROP
iptables -I INPUT -s 192.155.212.192/27 -j DROP
iptables -I INPUT -s 198.11.193.182/31 -j DROP
iptables -I INPUT -s 198.11.212.0/27 -j DROP
iptables -I INPUT -s 198.11.217.192/27 -j DROP
iptables -I INPUT -s 198.11.251.32/27 -j DROP
iptables -I INPUT -s 198.23.80.0/27 -j DROP
iptables -I INPUT -s 198.23.86.224/27 -j DROP
iptables -I INPUT -s 198.23.87.64/27 -j DROP
iptables -I INPUT -s 208.43.115.192/27 -j DROP
iptables -I INPUT -s 208.43.117.79/32 -j DROP
iptables -I INPUT -s 208.43.117.136/32 -j DROP
iptables -I INPUT -s 208.43.122.128/27 -j DROP
iptables -I INPUT -s 208.43.244.168/29 -j DROP
iptables -I OUTPUT -s 5.153.52.248/29 -j DROP
iptables -I OUTPUT -s 50.22.194.224/27 -j DROP
iptables -I OUTPUT -s 50.22.198.204/30 -j DROP
iptables -I OUTPUT -s 50.22.210.32/30 -j DROP
iptables -I OUTPUT -s 50.22.210.128/27 -j DROP
iptables -I OUTPUT -s 50.22.225.64/27 -j DROP
iptables -I OUTPUT -s 50.22.231.32/27 -j DROP
iptables -I OUTPUT -s 50.22.235.248/30 -j DROP
iptables -I OUTPUT -s 50.22.240.160/27 -j DROP
iptables -I OUTPUT -s 50.23.90.128/27 -j DROP
iptables -I OUTPUT -s 50.97.57.128/27 -j DROP
iptables -I OUTPUT -s 75.126.39.32/27 -j DROP
iptables -I OUTPUT -s 108.168.174.0/27 -j DROP
iptables -I OUTPUT -s 108.168.176.192/26 -j DROP
iptables -I OUTPUT -s 108.168.177.0/27 -j DROP
iptables -I OUTPUT -s 108.168.180.96/27 -j DROP
iptables -I OUTPUT -s 108.168.254.65/32 -j DROP
iptables -I OUTPUT -s 108.168.255.224/32 -j DROP
iptables -I OUTPUT -s 108.168.255.227/32 -j DROP
iptables -I OUTPUT -s 119.81.51.216/29 -j DROP
iptables -I OUTPUT -s 158.85.0.96/27 -j DROP
iptables -I OUTPUT -s 158.85.5.192/27 -j DROP
iptables -I OUTPUT -s 158.85.73.128/27 -j DROP
iptables -I OUTPUT -s 158.85.73.176/28 -j DROP
iptables -I OUTPUT -s 173.192.212.200/30 -j DROP
iptables -I OUTPUT -s 173.192.219.96/27 -j DROP
iptables -I OUTPUT -s 173.192.219.128/27 -j DROP
iptables -I OUTPUT -s 173.192.222.160/27 -j DROP
iptables -I OUTPUT -s 173.192.231.32/27 -j DROP
iptables -I OUTPUT -s 173.193.205.0/27 -j DROP
iptables -I OUTPUT -s 173.193.230.96/27 -j DROP
iptables -I OUTPUT -s 173.193.230.128/27 -j DROP
iptables -I OUTPUT -s 173.193.239.0/27 -j DROP
iptables -I OUTPUT -s 173.193.247.192/27 -j DROP
iptables -I OUTPUT -s 174.36.194.48/28 -j DROP
iptables -I OUTPUT -s 174.36.208.128/27 -j DROP
iptables -I OUTPUT -s 174.36.210.32/27 -j DROP
iptables -I OUTPUT -s 174.36.251.192/27 -j DROP
iptables -I OUTPUT -s 174.37.199.192/27 -j DROP
iptables -I OUTPUT -s 174.37.217.64/27 -j DROP
iptables -I OUTPUT -s 174.37.231.64/27 -j DROP
iptables -I OUTPUT -s 174.37.243.64/27 -j DROP
iptables -I OUTPUT -s 184.173.73.176/28 -j DROP
iptables -I OUTPUT -s 184.173.136.64/27 -j DROP
iptables -I OUTPUT -s 184.173.147.32/27 -j DROP
iptables -I OUTPUT -s 184.173.161.64/32 -j DROP
iptables -I OUTPUT -s 184.173.161.160/27 -j DROP
iptables -I OUTPUT -s 184.173.173.116/32 -j DROP
iptables -I OUTPUT -s 184.173.179.32/27 -j DROP
iptables -I OUTPUT -s 192.155.193.0/28 -j DROP
iptables -I OUTPUT -s 192.155.212.192/27 -j DROP
iptables -I OUTPUT -s 198.11.193.182/31 -j DROP
iptables -I OUTPUT -s 198.11.212.0/27 -j DROP
iptables -I OUTPUT -s 198.11.217.192/27 -j DROP
iptables -I OUTPUT -s 198.11.251.32/27 -j DROP
iptables -I OUTPUT -s 198.23.80.0/27 -j DROP
iptables -I OUTPUT -s 198.23.86.224/27 -j DROP
iptables -I OUTPUT -s 198.23.87.64/27 -j DROP
iptables -I OUTPUT -s 208.43.115.192/27 -j DROP
iptables -I OUTPUT -s 208.43.117.79/32 -j DROP
iptables -I OUTPUT -s 208.43.117.136/32 -j DROP
iptables -I OUTPUT -s 184.173.147.32/27 -j DROP
iptables -I OUTPUT -s 184.173.161.64/32 -j DROP
iptables -I OUTPUT -s 184.173.161.160/27 -j DROP
iptables -I OUTPUT -s 184.173.173.116/32 -j DROP
iptables -I OUTPUT -s 184.173.179.32/27 -j DROP
iptables -I OUTPUT -s 192.155.193.0/28 -j DROP
iptables -I OUTPUT -s 192.155.212.192/27 -j DROP
iptables -I OUTPUT -s 198.11.193.182/31 -j DROP
iptables -I OUTPUT -s 198.11.212.0/27 -j DROP
iptables -I OUTPUT -s 198.11.217.192/27 -j DROP
iptables -I OUTPUT -s 198.11.251.32/27 -j DROP
iptables -I OUTPUT -s 198.23.80.0/27 -j DROP
iptables -I OUTPUT -s 198.23.86.224/27 -j DROP
iptables -I OUTPUT -s 198.23.87.64/27 -j DROP
iptables -I OUTPUT -s 208.43.115.192/27 -j DROP
iptables -I OUTPUT -s 208.43.117.79/32 -j DROP
iptables -I OUTPUT -s 208.43.117.136/32 -j DROP
iptables -I OUTPUT -s 208.43.122.128/27 -j DROP
iptables -I OUTPUT -s 208.43.244.168/29 -j DROP
iptables -I FORWARD -s 5.153.52.248/29 -j DROP
iptables -I FORWARD -s 50.22.194.224/27 -j DROP
iptables -I FORWARD -s 50.22.198.204/30 -j DROP
iptables -I FORWARD -s 50.22.210.32/30 -j DROP
iptables -I FORWARD -s 50.22.210.128/27 -j DROP
iptables -I FORWARD -s 50.22.225.64/27 -j DROP
iptables -I FORWARD -s 50.22.231.32/27 -j DROP
iptables -I FORWARD -s 50.22.235.248/30 -j DROP
iptables -I FORWARD -s 50.22.240.160/27 -j DROP
iptables -I FORWARD -s 50.23.90.128/27 -j DROP
iptables -I FORWARD -s 50.97.57.128/27 -j DROP
iptables -I FORWARD -s 75.126.39.32/27 -j DROP
iptables -I FORWARD -s 108.168.174.0/27 -j DROP
iptables -I FORWARD -s 108.168.176.192/26 -j DROP
iptables -I FORWARD -s 108.168.177.0/27 -j DROP
iptables -I FORWARD -s 108.168.180.96/27 -j DROP
iptables -I FORWARD -s 108.168.254.65/32 -j DROP
iptables -I FORWARD -s 108.168.255.224/32 -j DROP
iptables -I FORWARD -s 108.168.255.227/32 -j DROP
iptables -I FORWARD -s 119.81.51.216/29 -j DROP
iptables -I FORWARD -s 158.85.0.96/27 -j DROP
iptables -I FORWARD -s 158.85.5.192/27 -j DROP
iptables -I FORWARD -s 158.85.73.128/27 -j DROP
iptables -I FORWARD -s 158.85.73.176/28 -j DROP
iptables -I FORWARD -s 173.192.212.200/30 -j DROP
iptables -I FORWARD -s 173.192.219.96/27 -j DROP
iptables -I FORWARD -s 173.192.219.128/27 -j DROP
iptables -I FORWARD -s 173.192.222.160/27 -j DROP
iptables -I FORWARD -s 173.192.231.32/27 -j DROP
iptables -I FORWARD -s 173.193.205.0/27 -j DROP
iptables -I FORWARD -s 173.193.230.96/27 -j DROP
iptables -I FORWARD -s 173.193.230.128/27 -j DROP
iptables -I FORWARD -s 173.193.239.0/27 -j DROP
iptables -I FORWARD -s 173.193.247.192/27 -j DROP
iptables -I FORWARD -s 174.36.194.48/28 -j DROP
iptables -I FORWARD -s 174.36.208.128/27 -j DROP
iptables -I FORWARD -s 174.36.210.32/27 -j DROP
iptables -I FORWARD -s 174.36.251.192/27 -j DROP
iptables -I FORWARD -s 174.37.199.192/27 -j DROP
iptables -I FORWARD -s 174.37.217.64/27 -j DROP
iptables -I FORWARD -s 174.37.231.64/27 -j DROP
iptables -I FORWARD -s 174.37.243.64/27 -j DROP
iptables -I FORWARD -s 184.173.73.176/28 -j DROP
iptables -I FORWARD -s 184.173.136.64/27 -j DROP
iptables -I FORWARD -s 184.173.147.32/27 -j DROP
iptables -I FORWARD -s 184.173.161.64/32 -j DROP
iptables -I FORWARD -s 184.173.161.160/27 -j DROP
iptables -I FORWARD -s 184.173.173.116/32 -j DROP
iptables -I FORWARD -s 184.173.179.32/27 -j DROP
iptables -I FORWARD -s 192.155.193.0/28 -j DROP
iptables -I FORWARD -s 192.155.212.192/27 -j DROP
iptables -I FORWARD -s 198.11.193.182/31 -j DROP
iptables -I FORWARD -s 198.11.212.0/27 -j DROP
iptables -I FORWARD -s 198.11.217.192/27 -j DROP
iptables -I FORWARD -s 198.11.251.32/27 -j DROP
iptables -I FORWARD -s 198.23.80.0/27 -j DROP
iptables -I FORWARD -s 198.23.86.224/27 -j DROP
iptables -I FORWARD -s 198.23.87.64/27 -j DROP
iptables -I FORWARD -s 208.43.115.192/27 -j DROP
iptables -I FORWARD -s 208.43.117.79/32 -j DROP
iptables -I FORWARD -s 208.43.117.136/32 -j DROP
iptables -I FORWARD -s 184.173.147.32/27 -j DROP
iptables -I FORWARD -s 184.173.161.64/32 -j DROP
iptables -I FORWARD -s 184.173.161.160/27 -j DROP
iptables -I FORWARD -s 184.173.173.116/32 -j DROP
iptables -I FORWARD -s 184.173.179.32/27 -j DROP
iptables -I FORWARD -s 192.155.193.0/28 -j DROP
iptables -I FORWARD -s 192.155.212.192/27 -j DROP
iptables -I FORWARD -s 198.11.193.182/31 -j DROP
iptables -I FORWARD -s 198.11.212.0/27 -j DROP
iptables -I FORWARD -s 198.11.217.192/27 -j DROP
iptables -I FORWARD -s 198.11.251.32/27 -j DROP
iptables -I FORWARD -s 198.23.80.0/27 -j DROP
iptables -I FORWARD -s 198.23.86.224/27 -j DROP
iptables -I FORWARD -s 198.23.87.64/27 -j DROP
iptables -I FORWARD -s 208.43.115.192/27 -j DROP
iptables -I FORWARD -s 208.43.117.79/32 -j DROP
iptables -I FORWARD -s 208.43.117.136/32 -j DROP
iptables -I FORWARD -s 208.43.122.128/27 -j DROP
iptables -I FORWARD -s 208.43.244.168/29 -j DROP

#Range de Ips liberadas Whatsapp
iptables -I FORWARD -m iprange --src-range 192.168.1.110-192.168.1.110 -j ACCEPT
iptables -I FORWARD -m iprange --dst-range 192.168.1.110-192.168.1.110 -j ACCEPT

Lista oficial de todos os CIDRs utilizados pelo whatsapp.

https://www.whatsapp.com/cidr.txt

Solução para bloqueio de Whatsapp

Eu obtive sucesso para bloquear o WhatsApp usando o Firewall magnifico chamado pfSense.

Hoje tenho 4 regras em funcionamento. Todas as regras é por range de IP, porem você pode seguir seu critério de para montar as regras. Segue a legenda abaixo do mesmo:
---------------------------------------------------
1ª [192.168.241.0/24]: Acesso ao WhatsApp (somente em modo
texto) e links corporativos e institucionais.

2ª [192.168.242.0/24]: Acesso total a qualquer página, aplicativos e
serviços.

3ª [192.168.243.0/24]: Acesso total somente para Whatsapp (texto,
imagem, vídeo, áudio e ligações).

4ª [192.168.244.0/24]: Acesso total a qualquer página, aplicativos e
serviços, sem limite de banda.
---------------------------------------------------

Na primeira regra só WhatsApp Texto funciona, com limite de 1MB de download e Upload (Limitando no pfsense).
Na segunda regra é acesso total, porem com limite de 1MB de download e Upload (Limitando no pfsense).
Na terceira regra é acesso total no whatsapp,com vídeo, imagem, som, texto e ligações, porem com limite de 1MB de download e Upload (Limitando no pfsense).
Na quarta regra tem acesso total, porem não é limitado a banda.

Veja abaixo como está as regras no firewall:

Regra 1 = protocolo TCP, Origem 192.168.241.0/24, Destino "https://www.whatsapp.com/cidr.txt";, nas portas 5222, 5223 e 53.
Regra 2 = protocolo TCP/UDP, Origem 192.168.242.0/24, Destino "Qualquer", em qualquer porta, com limite de 1MB.
Regra 3 = protocolo Any, Origem 192.168.243.0/24, Destino "https://www.whatsapp.com/cidr.txt"; + servidores públicos DNS, em qualquer porta, com limite de 1MB.
Regra 4 = protocolo Any, Origem 192.168.242.0/24, Destino "Qualquer", em qualquer porta.

Visto que na terceira regra terá que ser implantado um IP de DNS publico, as imagens, videos, áudios e ligações necessitam fazer consultas DNS.

Duvidas, problemas ou sugestão, estou a disposição.

Grato!
--
Atenciosamente:

Valdir Martins da Silva Junior
E-mail: valdir.martins100@gmail.com
Fone: +55 62 9410-8188 (Claro - WhatsApp)

Eu tive problemas para instalar whatsapp
mas no final eu consegui-lo instalado através http://www.whatsappedia.com.br/