Problem - Using IPSec to secure Windows Messenger Traffic

From: Burak Bayoglu (bayoglu@uekae.tubitak.gov.tr)
Date: 05/28/02 

From: "Burak Bayoglu" <bayoglu@uekae.tubitak.gov.tr>
To: <focus-ms@securityfocus.com>
Date: Tue, 28 May 2002 16:09:05 +0300

We have problems with encrypting Windows Messenger traffic with Windows
IPSec. First of all did anybody succeed to encrypt this traffic ?
assuming you want to know about our exchange-messenger configuration and
IPSec policy, I give it below :

Clients' OS : Windows XP
Exchange Server 2000 OS(also DC): Advanced Server SP2

Communication occurs between clients and server through ports:

1. clients' any port to exchange's tcp:80
2. echange's any port to clients' tcp:12345 (fixed incoming client port)

the real problem is : we succeeded to encrypt the connections mentioned
above and successfully tested it with telnet connections between
them.. but the messenger client program neither can not sign in nor send
a message.

Does anyone have an idea about the situation? May there be something
working below IPSec layer about Windows Messenger or did anyone meet any
similar problem with any other application while using any sort of
IPSec?

Burak Bayoglu
TUBITAK-UEKAE
WinSec Group

Relevant Pages

  • Re: [OpenVMS, DECnet] How to do DECnet over - secure (ssh, ssl) - IP ? IP ? IP ?
    ... It is the Unix style of solving problems. ... sticky tape and paperclip way of software design. ... I assume it will be possible to encrypt DECnet over IP ... > with IPsec, but alas we have to wait just a little bit longer before ...
    (comp.os.vms)
  • Multiple Gateway IPSEC Problem
    ... Cisco Router: Gateway Interface: 10.0.1.2 ... spdadd 91.18.78.0/27 91.18.78.32/27 any -P in ipsec ... # Encrypt and direct all other traffic ...
    (freebsd-net)
  • RE: Cannot decrypt files encrypted using Crypto API on a different
    ... We have a desktop application which is used by many clients. ... send it over to the clients (we don't know anything about their public key). ... from step 2, hExpKey is NULL, blob type is PUBLICKEYBLOB) and send this blob ... encrypt your data with this key ...
    (microsoft.public.platformsdk.security)
  • Re: Looking for pointer to VPN / IPSEC info
    ... to be able to access my network while traveling. ... At work the problem is solved with an IPSEC VPN client that I run to connect ... clients built in. ... We usually use OpenVPN rather than IPSec as it's generally easier ...
    (freebsd-questions)
  • encrypt with C# and decrypt with C++
    ... application and occasionally sent to specific clients. ... and send it and can never decrypt it (even if somebody completely hacked the ... Can I use public key algorithm to encrypt using private key and give the ...
    (microsoft.public.dotnet.security)