Re: Block MSN Messenger

From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 01/24/03 

From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com>
Date: Fri, 24 Jan 2003 17:01:58 -0500

MSN messenger can also use common ports such as TCP 80 outbound which are
hard to block without breaking other things. Besides blocking the ports
commonly associated with MSN messenger, you should also block access to the
logon servers that MSN Messenger uses [For example, AIM chat uses
oscar.aol.com to login]. If you have your own DNS servers, you can add an
extra layer of trouble for chat users by setting up an empty dummy DNS
domain for the host name or domain name used by the logon servers, such as
oscar.aol.com to block the aol chat servers in that domain.

More information is available here:

http://securityadmin.info/faq.htm#6.11

... and also by searching www.google.com and
www.google.com/advanced_group_search for something like "MSN Messenger block
TCP"

"Randy" <rkushner2@hotmail.com> wrote in message
news:063d01c2c3dd$27f128e0$8ef82ecf@TK2MSFTNGXA04...
>
> >-----Original Message-----
> >I want to build a cisco access list to block MSN
> Messenger
> >on my routers. Can anyone tell me which ports are being
> >used? I have already blocked TCP 1863 but it looks like
> >many random port are being used. Thanks for you help.
> >.
> >All I'm interested in doing is block the TCP/UDP ports
> being used by MSN Messenger. Would like to stop folks on
> the inside from chatting all day. 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.443 / Virus Database: 248 - Release Date: 1/10/2003

Relevant Pages

  • Re: Block messenger
    ... if you router has some filtering functions you might be in a position to ... MSN Messenger uses a range of ports and you ...
    (microsoft.public.windows.server.sbs)
  • Re: Denied UDP packet from LAN port 4654 to router 1900
    ... it's definitely the XP-style messenging UPnP stuff causing 1900 UDP ... > Probably MSN Messenger which I think enables or uses Universal Plug and Play ... >> thing on those ports and gave no further detail (no program shows on those ... >> Our domain is an NT4 domain. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Best means to block MSN Messenger, AIM and other chat programs?
    ... You would need to also block TCP 5060-5061 and UDP 5060 if users are using XP. ... I have worked with MSN Messenger issues in the past. ... and Video Conferencing (also netmeeting). ... ports that span a great range of UDP ports. ...
    (Security-Basics)
  • RE: How to block MSN file transfer
    ... ISA server has those ports blocked by default and you had ... to open them if you wanted Messenger file transfers (only ... >MSN messenger uses specific ports for the file transfers, ...
    (microsoft.public.isaserver)
  • RE: Best means to block MSN Messenger, AIM and other chat programs?
    ... I have worked with MSN Messenger issues in the past. ... and Video Conferencing (also netmeeting). ... ports that span a great range of UDP ports. ... Best means to block MSN Messenger, AIM and other chat programs? ...
    (Security-Basics)