RE: Best means to block MSN Messenger, AIM and other chat programs?

From: Munkhbayar.B (munkhbayar@mobicom.mn)
Date: 02/22/02 

From: "Munkhbayar.B" <munkhbayar@mobicom.mn>
To: "KEN MORRIS" <KMORRIS@kpl.org>, <security-basics@securityfocus.com>
Date: Fri, 22 Feb 2002 10:17:16 +0800

This chat programs uses any available ports. You cant deny them by ports. Just leave the ports patient.

You'll need block access to their master servers. I know some of them.
Exam:
  yahoo.
  216.136.130.46/24
  216.136.173.179
  216.136.175.132
  216.136.175.143
  216.136.224.215
  216.136.225.011
  216.136.227.168
  216.136.233.130
  216.136.233.132

You can obtain these ip by using "netstat" -ing on testing PC.
or search by google.

good luck. from Mongolia.

-----Original Message-----
From: KEN MORRIS [mailto:KMORRIS@kpl.org]
Sent: Thursday, February 21, 2002 12:31 AM
To: security-basics@securityfocus.com
Subject: Best means to block MSN Messenger, AIM and other chat programs?

Hello,
I am using both filtering software and Firewall (GNat Box) to try to
block out the use of several chat programs. On the FW I have blocked
ports:
4000 - ICQ
1863 - MSN Messenger
5050 - AOL and
5190 for Yahoo
After having set up the blocking rule, I then tested MSN Messenger in
the system. Problem being that it was still accessible.
Any suggestions as to how to block the use of the programs at the
firewall would be greatly appreciated.
Thank you
Ken Morris

Relevant Pages