PIX block ICQ, MSN

[aachen]

How can I block ICQ/MSN traffic from inside through outside on PIX firewall? (by service port is dynamic)

[jmia]

Hi,

Try applying the following ACLs on the inside interface of the PIX to stop MSN Messenger service. I have this applied to a few of my PIXs and this stops MSN Messenger connectivity.

access-list inside deny tcp any any eq 1863

access-list inside deny ip any 64.4.13.0 255.255.255.0

access-list inside deny ip any 207.46.110.0 255.255.255.0

access-group inside in interface inside

Remember to issue clear xlate and save with write mem after you have applied the above ACLs, Not too sure on the service ports for ICQ but if I do find out the port addresses I'll let you know. Try searching google.com for ICQ port addresses.

Hope this helps and let me know how you get on.

Jay

[jmia]

Here is a follow up document I found that might be of interest to you:

http://nscsysop.hypermart.net/no_chat.html

Jay

[aachen]

Jay:

Thanks your information and great support!

I will try it later.

Anson