blocking Yahoo instant messenger

[ewieczorek]

Hi.

I need to block Yahoo IM.

I was going to do this in the form of acl's on my PIX.

What ip's or ports do I need to block?

Thanks.

[ddemers]

This seems to work for us:

access-list acl_in deny ip any host 216.136.225.238

access-list acl_in permit ip any any

access-group acl_in in interface inside

216.136.225.238 is msg1.edit.vip.sc5.yahoo.com. I believe that's all you need to block, but could be wrong.

[i.elnory]

i had tried to much , they change servers also ports

[ashokpawar]

i also tried to block using port number.... something like this

access-list block-msg deny tcp any any eq 5050

access-list block-msg permit ip any any

access-group block-msg in interface inside

But still i was able to connect ....and using "show conn" i found it is using port number 23 (telnet).

TCP out 216.136.233.134:23 in 192.168.129.28:1364 idle 0:03:37 Bytes 1814 flags UIO

One of the method to block messenger is to know the IP Address of all the yahoo messenger servers and then block all tcp connections to that IP from your LAN.

Is there any other method to block the yahoo messenger ???

[jruelo]

Check out this thread on the same subject:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26mode%3Dnew%26location%3D.ee790cd/3