Firewall Settings to Block Messenger Access

Firewall Settings to Block Messenger Access

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Firewall Settings to Block Messenger Access John F Kappler 11-09-2004
Posted by John F Kappler on November 9, 2004, 2:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I need to set the Firewall settings in my Draytek Router to block
access to (and from?) Messenger.

I've done a search here, and a Google search, but seem to find mixed
answers, many of which contradict each other...

Some list various Ports to block, but then Messenger appears to use
Port 80 which is needed for other things.

Some list IP Addresses, but the lists vary, and there appear to be new
addresses getting added regularly.

One post suggested blocking access to https://login.passport.com, but
I dont understand how to do that on my router without knowing an IP
address.

Any help would be much appreciated, especially if you can relate what
I need to do to the Draytek Firewall parameters.

TIA,

JohnK


Posted by Lars M. Hansen on November 9, 2004, 10:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 09 Nov 2004 14:02:39 GMT, John F Kappler spoketh

>I need to set the Firewall settings in my Draytek Router to block
>access to (and from?) Messenger.
>
>I've done a search here, and a Google search, but seem to find mixed
>answers, many of which contradict each other...
>
>Some list various Ports to block, but then Messenger appears to use
>Port 80 which is needed for other things.
>
>Some list IP Addresses, but the lists vary, and there appear to be new
>addresses getting added regularly.
>
>One post suggested blocking access to https://login.passport.com, but
>I dont understand how to do that on my router without knowing an IP
>address.
>
>Any help would be much appreciated, especially if you can relate what
>I need to do to the Draytek Firewall parameters.
>
>TIA,
>
>JohnK

;; QUESTION SECTION:
;login.passport.com. IN A

;; ANSWER SECTION:
login.passport.com. 61 IN A 65.54.183.198
login.passport.com. 61 IN A 65.54.179.198

So, currently, those are the two IP addresses is use by that host name.
If you block those, you'll block access to everything using the MS
passport service, including Messenger, MSN, Hotmail and anything you
need to log in to get at Microsoft.

If you have your own DNS server, you might be able to put in a dummy
entry for this host, so that it will never resolve to an external IP
address.

As with many IM packages, it's almost easier to remove the software than
to try to block it at the firewall...

Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)


Posted by Gary on November 9, 2004, 3:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
John F Kappler wrote:

> One post suggested blocking access to https://login.passport.com, but
> I dont understand how to do that on my router without knowing an IP
> address.

It looks like they're using round robin DNS or something like f5's 3DNS.
Currently the IPs are 65.54.179.198 and 65.54.183.198 but those may
change on a regular basis.

The problem with most IM services is that there also Java versions of
the IM app that may or may not use the same ports.

See http://www.aim.com/get_aim/express/aim_expr.adp?aolp= and
http://www.msn2go.com/

Is there a particular reason you need to block IM services? If it's part
of something like Sarbanes-Oxley compliance, you could always set up a
jabber server and force your users to use its gateways to outside IM
services.

http://jabberd.jabberstudio.org/1.4/doc/componentguide#gateways

-Gary


Posted by E. on November 9, 2004, 8:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
John F Kappler wrote:
> I need to set the Firewall settings in my Draytek Router to block
> access to (and from?) Messenger.
>
> I've done a search here, and a Google search, but seem to find mixed
> answers, many of which contradict each other...
>
> Some list various Ports to block, but then Messenger appears to use
> Port 80 which is needed for other things.
>
> Some list IP Addresses, but the lists vary, and there appear to be new
> addresses getting added regularly.
>
> One post suggested blocking access to https://login.passport.com, but
> I dont understand how to do that on my router without knowing an IP
> address.
>
> Any help would be much appreciated, especially if you can relate what
> I need to do to the Draytek Firewall parameters.
>
> TIA,
>
> JohnK

The only way I know of to block the messenger application (not the
service) is to disable it via group policy.
E.


Posted by jp on November 12, 2004, 7:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
a simple fudge i did on a client was to set internet messenger with a faulty
sock proxy server and this stopped it!!!. you might be able to lock this
down with a registry change..



a slightly drunk


john


>I need to set the Firewall settings in my Draytek Router to block
> access to (and from?) Messenger.
>
> I've done a search here, and a Google search, but seem to find mixed
> answers, many of which contradict each other...
>
> Some list various Ports to block, but then Messenger appears to use
> Port 80 which is needed for other things.
>
> Some list IP Addresses, but the lists vary, and there appear to be new
> addresses getting added regularly.
>
> One post suggested blocking access to https://login.passport.com, but
> I dont understand how to do that on my router without knowing an IP
> address.
>
> Any help would be much appreciated, especially if you can relate what
> I need to do to the Draytek Firewall parameters.
>
> TIA,
>
> JohnK




Similar ThreadsPosted
Block insant messenger September 20, 2008, 10:51 pm
Sonicwall 2040 can't block MSN Messenger 4.7 September 7, 2006, 4:38 am
block yahoo messenger (linksys befsx41)? February 15, 2005, 3:56 am
Block MSN Messenger by router rules (Netgear DG834) February 8, 2005, 7:14 pm
Block MSN Messenger by router rules (Netgear DG834) February 8, 2005, 8:17 pm
Program access settings with location profile support December 7, 2006, 7:14 am
Block Internet Access with Win2K NAT or ICS December 23, 2004, 5:38 am
Block internet access for apps that use random ports September 12, 2007, 10:48 am
Suggestions please!!! Need a device to block internet access to specific URLs and IM programs in office March 24, 2007, 2:44 pm
Can't Use Messenger with Firewall ON July 19, 2005, 6:32 am

The site map in XML format XML site map

Contact Us | Privacy Policy