12-18-2002 12:42 PM - edited 03-09-2019 01:27 AM
Hi,
I have a simple question (I think), How can I block the messenger services from hotmail and yahoo? I appreciate your response.
12-18-2002 03:39 PM
Here's a good link on blocking a number of messenging applications:
http://testweb.oofle.com/messaging/index.htm
Apply these port and address filters on your inside interface, that'll stop people being able to connect.
12-20-2002 11:27 AM
MSN is pretty easy because it uses a fixed port. Some (like Yahoo pager) are difficult because they will find a port that is open. To block the tricky ones, you have to block all of the hosts that they will conect to at the top of your outbound access list (inside interface). I have written one that blocks all of the IM programs using an object-group, so when a new site is discovered, I just add it to the group. For Yahoo IM, I wrote a Perl script to generate a list of all of the yahoo hosts that contained "msg" anywhere in the host name and pre-pend the corresponding IP with network-object host x.x.x.x . Here is the object-group:
object-group network bad_sites
description Sites used for peer to peer and IM.
network-object host 152.163.241.128
network-object host 152.163.241.120
network-object host 152.163.242.24
network-object host 152.163.242.28
network-object host 216.136.225.238
network-object host 66.163.172.51
network-object host 66.163.172.50
network-object host 216.136.232.153
network-object host 216.136.232.154
network-object host 216.136.233.129
network-object host 216.136.226.208
network-object host 216.136.233.128
network-object 128.121.26.0 255.255.255.0
network-object host 66.12.161.185
network-object host 66.12.161.153
network-object host 64.58.78.151
network-object host 64.58.79.23
network-object host 64.58.79.25
network-object host 64.58.79.26
network-object host 64.58.79.27
network-object host 64.58.78.224
network-object host 64.58.78.225
network-object host 64.58.78.226
network-object host 64.58.78.150
network-object host 64.58.77.57
network-object host 64.58.78.227
network-object host 64.58.78.228
network-object host 205.188.179.233
network-object host 64.12.200.89
network-object host 216.136.172.75
network-object host 216.136.172.163
network-object host 216.136.172.221
network-object host 216.136.172.222
network-object host 216.136.172.223
network-object host 216.136.172.224
network-object host 216.136.172.225
network-object host 216.136.172.226
network-object host 216.136.172.227
network-object host 216.136.172.228
network-object host 216.136.172.248
network-object host 216.136.172.249
network-object host 216.136.172.250
network-object host 216.136.172.251
network-object host 216.136.172.252
network-object host 216.136.172.253
network-object host 216.136.173.16
network-object host 216.136.173.93
network-object host 216.136.173.107
network-object host 216.136.173.141
network-object host 216.136.173.142
network-object host 216.136.173.161
network-object host 216.136.173.162
network-object host 216.136.173.163
network-object host 216.136.173.164
network-object host 216.136.173.168
network-object host 216.136.173.169
network-object host 216.136.173.170
network-object host 216.136.173.171
network-object host 216.136.173.172
network-object host 216.136.173.173
network-object host 216.136.173.174
network-object host 216.136.173.179
network-object host 216.136.173.180
network-object host 216.136.173.181
network-object host 216.136.173.182
network-object host 216.136.173.183
network-object host 216.136.173.184
network-object host 216.136.173.185
network-object host 216.136.173.186
network-object host 216.136.174.50
network-object host 216.136.174.83
network-object host 216.136.174.237
network-object host 216.136.174.238
network-object host 216.136.174.239
network-object host 216.136.174.240
network-object host 216.136.174.253
network-object host 216.136.174.254
network-object host 216.136.175.132
network-object host 216.136.175.142
network-object host 216.136.175.143
network-object host 216.136.175.144
network-object host 216.136.175.145
network-object host 216.136.175.226
network-object host 216.136.175.229
network-object host 64.58.79.24
network-object host 66.163.168.105
network-object host 66.163.168.107
network-object host 66.163.168.116
network-object host 66.163.168.117
network-object host 66.163.168.118
network-object host 66.163.169.134
network-object host 66.163.169.135
network-object host 66.163.169.136
network-object host 66.163.169.137
network-object host 66.163.169.141
network-object host 66.163.169.142
network-object host 66.163.169.143
network-object host 66.163.169.148
network-object host 66.163.169.149
network-object host 66.163.169.150
network-object host 66.163.169.212
network-object host 66.163.169.213
network-object host 66.163.169.228
network-object host 66.163.169.229
network-object host 66.163.169.238
network-object host 66.163.169.246
network-object host 66.163.169.247
network-object host 66.163.169.248
network-object host 66.163.169.249
network-object host 66.163.172.71
network-object host 66.163.172.76
network-object host 66.163.172.77
network-object host 66.163.172.80
network-object host 66.163.172.81
network-object host 66.163.172.82
network-object host 66.163.172.83
network-object host 66.163.172.84
network-object host 66.163.172.93
network-object host 66.163.172.94
network-object host 66.163.172.99
network-object host 66.163.172.100
network-object host 66.163.172.101
network-object host 66.163.172.102
network-object host 66.163.172.117
network-object host 66.163.173.1
network-object host 66.163.173.2
network-object host 66.163.173.3
network-object host 66.163.173.4
network-object host 66.163.173.5
network-object host 66.163.173.6
network-object host 66.163.173.7
network-object host 66.163.173.8
network-object host 66.163.173.9
network-object host 66.163.173.10
network-object host 66.163.173.11
network-object host 66.163.173.12
network-object host 66.163.173.13
network-object host 66.163.173.14
network-object host 66.163.173.15
network-object host 66.163.173.16
network-object host 66.163.173.18
network-object host 66.163.173.20
network-object host 66.163.173.21
network-object host 66.163.173.22
network-object host 66.163.173.23
network-object host 66.163.173.30
network-object host 66.163.173.31
network-object host 66.163.173.76
network-object host 66.163.173.77
network-object host 66.163.173.78
network-object host 66.163.173.79
network-object host 66.163.173.80
network-object host 66.163.173.81
network-object host 66.163.173.82
network-object host 66.163.173.83
network-object host 66.163.173.84
network-object host 66.163.173.85
network-object host 66.163.173.86
network-object host 66.163.173.87
network-object host 66.163.173.88
network-object host 66.163.173.89
network-object host 66.163.173.90
network-object host 66.163.173.91
network-object host 66.163.173.92
network-object host 66.163.173.93
network-object host 66.163.173.94
network-object host 66.163.173.95
network-object host 66.163.173.96
network-object host 66.163.173.97
network-object host 66.163.173.98
network-object host 66.163.173.99
network-object host 66.163.173.130
network-object host 66.163.173.131
network-object host 66.163.173.132
network-object host 66.163.173.133
network-object host 66.163.173.134
network-object host 66.163.173.135
network-object host 66.163.173.136
network-object host 66.163.173.137
network-object host 66.163.173.138
network-object host 66.163.173.139
network-object host 66.163.173.140
network-object host 66.163.173.141
network-object host 66.163.173.142
network-object host 66.163.173.143
network-object host 66.163.173.144
network-object host 66.163.173.145
network-object host 66.163.173.146
network-object host 66.163.173.147
network-object host 66.163.173.148
network-object host 66.163.173.149
network-object host 66.163.173.150
network-object host 66.163.173.151
network-object host 66.163.173.152
network-object host 66.163.173.153
network-object host 66.163.173.154
network-object host 66.163.173.155
network-object host 66.163.173.156
network-object host 66.163.173.157
network-object host 66.163.173.158
network-object host 66.163.173.159
network-object host 66.163.173.160
network-object host 66.163.173.161
network-object host 66.163.173.162
network-object host 66.163.173.163
network-object host 66.163.173.164
network-object host 66.163.173.165
network-object host 66.163.173.167
network-object host 66.163.173.168
network-object host 66.163.173.169
network-object host 66.163.173.170
network-object host 66.163.173.171
network-object host 66.163.173.172
network-object host 66.163.173.173
network-object host 66.163.173.174
network-object host 66.163.173.175
network-object host 66.163.173.176
network-object host 66.163.173.177
network-object host 66.163.173.178
network-object host 66.163.173.179
network-object host 66.163.173.180
network-object host 66.163.173.181
network-object host 66.163.173.182
network-object host 66.163.173.183
network-object host 66.163.173.184
network-object host 66.163.173.185
network-object host 66.163.173.186
network-object host 66.163.173.187
network-object host 66.163.173.192
network-object host 66.163.173.193
network-object host 66.163.173.196
network-object host 66.163.173.197
network-object host 66.163.173.198
network-object host 66.163.173.199
network-object host 66.163.173.200
network-object host 66.163.173.201
network-object host 66.163.173.202
network-object host 66.163.173.203
network-object host 66.163.173.210
network-object host 66.163.173.211
network-object host 66.163.173.212
network-object host 66.163.173.213
network-object host 66.163.173.214
network-object host 66.163.173.215
network-object host 66.163.173.216
network-object host 66.163.173.217
network-object host 66.163.173.218
network-object host 66.163.173.219
network-object host 66.163.173.220
network-object host 66.163.173.221
network-object host 66.163.173.222
network-object host 66.163.173.223
network-object host 66.163.173.224
network-object host 66.163.173.225
network-object host 66.163.173.226
network-object host 66.163.173.227
network-object host 66.163.173.228
network-object host 66.163.173.229
network-object host 66.163.173.230
network-object host 66.163.173.231
network-object host 66.163.173.232
network-object host 66.163.173.233
network-object host 66.163.173.234
network-object host 66.163.173.235
network-object host 216.136.224.134
network-object host 216.136.224.142
network-object host 216.136.224.143
network-object host 216.136.224.212
network-object host 216.136.224.213
network-object host 216.136.224.214
network-object host 216.136.224.235
network-object host 216.136.224.236
network-object host 216.136.224.248
network-object host 216.136.225.11
network-object host 216.136.225.12
network-object host 216.136.225.26
network-object host 216.136.225.27
network-object host 216.136.225.28
network-object host 216.136.225.35
network-object host 216.136.225.36
network-object host 216.136.225.83
network-object host 216.136.225.84
network-object host 216.136.225.185
network-object host 216.136.225.186
network-object host 216.136.225.187
network-object host 216.136.225.188
network-object host 216.136.225.189
network-object host 216.136.225.190
network-object host 216.136.225.191
network-object host 216.136.225.192
network-object host 216.136.225.193
network-object host 216.136.225.194
network-object host 216.136.225.217
network-object host 216.136.225.221
network-object host 216.136.225.236
network-object host 216.136.225.237
network-object host 216.136.226.10
network-object host 216.136.226.11
network-object host 216.136.226.12
network-object host 216.136.226.13
network-object host 216.136.226.14
network-object host 216.136.226.15
network-object host 216.136.226.16
network-object host 216.136.226.17
network-object host 216.136.226.18
network-object host 216.136.226.19
network-object host 216.136.226.20
network-object host 216.136.226.21
network-object host 216.136.226.22
network-object host 216.136.226.23
network-object host 216.136.226.117
network-object host 216.136.226.118
network-object host 216.136.226.205
network-object host 216.136.226.206
network-object host 216.136.226.207
network-object host 216.136.226.209
network-object host 216.136.226.210
network-object host 216.136.226.254
network-object host 216.136.227.11
network-object host 216.136.227.12
network-object host 216.136.227.20
network-object host 216.136.227.21
network-object host 216.136.227.22
network-object host 216.136.227.23
network-object host 216.136.227.24
network-object host 216.136.227.25
network-object host 216.136.227.28
network-object host 216.136.227.30
network-object host 216.136.227.31
network-object host 216.136.227.44
network-object host 216.136.227.45
network-object host 216.136.227.46
network-object host 216.136.227.50
network-object host 216.136.227.74
network-object host 216.136.227.75
network-object host 216.136.227.76
network-object host 216.136.227.77
network-object host 216.136.227.78
network-object host 216.136.227.79
network-object host 216.136.227.121
network-object host 216.136.227.122
network-object host 216.136.227.123
network-object host 216.136.227.124
network-object host 216.136.227.125
network-object host 216.136.227.126
network-object host 216.136.227.142
network-object host 216.136.227.160
network-object host 216.136.227.161
network-object host 216.136.227.162
network-object host 216.136.227.163
network-object host 216.136.227.166
network-object host 216.136.227.167
network-object host 216.136.227.168
network-object host 216.136.128.144
network-object host 216.136.128.145
network-object host 216.136.128.167
network-object host 216.136.130.46
network-object host 216.136.131.64
network-object host 216.136.131.65
network-object host 216.136.131.66
network-object host 216.136.131.67
network-object host 216.136.131.78
network-object host 216.136.131.79
network-object host 216.136.131.88
network-object host 216.136.131.89
network-object host 216.136.131.90
network-object host 216.136.131.91
network-object host 216.136.131.108
network-object host 216.136.131.109
network-object host 216.136.131.110
network-object host 216.136.131.111
network-object host 216.136.131.112
network-object host 216.136.131.113
network-object host 216.136.131.114
network-object host 216.136.131.115
network-object host 216.136.131.116
network-object host 216.136.131.117
network-object host 216.136.131.118
network-object host 216.136.131.119
network-object host 216.136.131.198
network-object host 216.136.131.199
network-object host 216.136.131.200
network-object host 216.136.131.201
network-object host 216.136.131.202
network-object host 216.136.131.203
network-object host 216.136.131.212
network-object host 216.136.131.228
network-object host 216.136.131.229
network-object host 216.136.232.136
network-object host 216.136.232.137
network-object host 216.136.232.138
network-object host 216.136.232.139
network-object host 216.136.232.140
network-object host 216.136.232.141
network-object host 216.136.232.162
network-object host 216.136.232.165
network-object host 216.136.233.130
network-object host 216.136.233.131
network-object host 216.136.233.132
network-object host 216.136.233.133
network-object host 216.136.233.134
network-object host 216.136.233.135
network-object host 216.136.233.136
network-object host 216.136.233.137
network-object host 216.136.233.138
network-object host 216.136.233.140
network-object host 216.136.233.141
network-object host 216.136.233.148
network-object host 216.136.233.150
network-object host 216.136.233.151
network-object host 216.136.233.152
network-object host 216.136.233.153
network-object host 216.136.233.154
network-object host 216.136.233.155
network-object host 216.136.233.156
network-object host 216.136.233.157
network-object host 216.136.233.158
network-object host 216.136.233.159
network-object host 216.136.233.160
network-object host 216.136.233.161
network-object host 216.136.233.162
network-object host 216.136.233.163
network-object host 216.136.233.164
network-object host 216.136.233.165
network-object host 216.136.233.166
network-object host 216.136.233.167
network-object host 216.136.233.168
network-object host 216.136.233.169
network-object host 216.136.233.170
network-object host 216.136.233.171
network-object host 216.136.233.172
network-object host 216.136.233.173
network-object host 216.136.233.174
network-object host 216.136.233.175
network-object host 216.136.233.176
network-object host 216.136.233.177
network-object host 216.136.233.178
network-object host 216.136.233.179
network-object host 216.136.233.180
network-object host 216.136.233.181
network-object host 216.136.233.182
network-object host 216.136.233.183
network-object host 216.136.233.184
network-object host 216.136.233.185
network-object host 216.136.233.186
network-object host 216.136.233.187
network-object host 216.136.233.188
network-object host 216.136.233.189
network-object host 216.136.233.190
network-object host 216.136.233.191
Copy and past this into your Pix config and plant an acl like this at the top of your outbound list:
access-list outbound deny ip any object-group bad_sites
This question gets asked a lot on this forum. Perhaps there should be a security tech tip on this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide