Re: MSN

From: Matt Gibson (mattg_at_blueedgetech.ca)
Date: 03/14/05

  • Next message: walt: "updates" 
    Date: Mon, 14 Mar 2005 14:51:02 -0800

    Now, here's where I'm honestly a bit shaky, but isn't there a number of
    servers? Not just a single one?

    (For all I know, they're just DNS round robined off the single name)

    Matt Gibson - GSEC

    "Bigbruva" <Richardh@dontusethis.ws> wrote in message
    news:eqvLrZOKFHA.1948@TK2MSFTNGP14.phx.gbl...
    > Okay Matt so perhaps I was being a little lazy in posting the link instead
    > of posting an answer...busted!
    >
    > If you wish to block MSN messenger from successfully connecting to the
    > messenger service do the following on your network firewall:
    >
    > 1) Block outbound access to TCP port 1863
    > 2) Block HTTP access to messenger.hotmail.com
    >
    > This will stop the initial access to the service and therefore block the
    > application and all it's other communications.
    >
    > HTH
    >
    > BB
    >
    >
    > "Matt Gibson" <mattg@blueedgetech.ca> wrote in message
    > news:OQrwyEMKFHA.2764@tk2msftngp13.phx.gbl...
    >> Bigbruva,
    >>
    >> While that's a good article, this paragraph explains why blocking IM from
    >> this at a port level is basically impossible.
    >>
    >> Instant Messaging and Presence
    >> In general, there are no issues with IM and presence affecting
    >> communication through a firewall or NAT device. If the Windows XP client
    >> can create and maintain a connection to the server, other IM and presence
    >> communication can follow this same path. For example, Microsoft Exchange
    >> IM transports its Presence and IM messages using hypertext transfer
    >> protocol (HTTP) and has mechanisms to insure that these messages can
    >> traverse firewall and NAT devices. These mechanisms include polling to
    >> maintain a TCP connection to the server for two-way communication and
    >> setting aside a fixed port for callback delivery.
    >>
    >> Matt Gibson - GSEC
    >>
    >>
    >> "Bigbruva" <Richardh@dontusethis.ws> wrote in message
    >> news:%231AeZAMKFHA.3928@TK2MSFTNGP09.phx.gbl...
    >>> If you are talking about "MSN Messenger" application, look at the
    >>> following URL. This lists all the posts used by this application for
    >>> sharing messages, files and applications.
    >>> http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/natfw.mspx
    >>>
    >>> Even though this page is for the Windows messenger the port numbers are
    >>> the same for the features in the MSN version.
    >>>
    >>> Let us know if this is what you needed.
    >>>
    >>> BB
    >>>
    >>>
    >>> "riki" <riki@discussions.microsoft.com> wrote in message
    >>> news:A1A379C7-06E2-4EC7-9F91-2F15CF55649A@microsoft.com...
    >>>> How to blok MSN which ports I need to block
    >>>
    >>>
    >>
    >>
    >
    >

  • Next message: walt: "updates"

    Relevant Pages

    • Re: use .net remoting?
      ... This exchange of information is within a company's intranet. ... firewall to worry about.All the servers are either win2000 or win2003 ... This communication is necessary since the "main part" of the ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Numbering of years.
      ... And isnt it odd that 1844 was regarded as presence of Christ, ... wow instant global communication to see if man uses it for ... the Flood subtracting the 600 calendar years. ... and yet Year 955 of Noah was 600 before Flood and 355 after Flood ...
      (soc.history.ancient)
    • Re: The Last Chance?
      ... the wish lists on MS...and we saved Stationery...we were heard. ... Our presence is what makes the ... We also saw waves of virus attacks on the servers. ... we still prevailed and continued posting. ...
      (microsoft.public.windows.inetexplorer.ie6_outlookexpress.stationery)
    • Re: [PATCH] adding per sb inode list to make invalidate_inodes() faster
      ... It's also worth noting that in the presence of things ... > different NFS servers. ... split in production systems we faced small hangs of umount and quota ... >> while the global inode LRU is maintained. ...
      (Linux-Kernel)
    • Re: Exploit through firewall question
      ... I perform vulnerability analysis on our outside web presense, usually during development and then after it's been deployed. ... Mgmt wants me to only test through the firewall as if I'm coming in like the public. ... Tools like core impact follow this logic of exploiting an external point of presence then tunneling or burrowing through to the next concentric network access rings potentially performing network scanning of all ports from the compromised point to other internal nodes. ... You have an option to go with a managed service or an enterprise software. ...
      (Pen-Test)