RE: Messaging Question

  • From: "Walkowiak, Matt" <Matt.Walkowiak@xxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 8 May 2002 12:45:55 -0500

Eric - 

The following is a discussion from the ISA list you may find helpful:

Matt

******************************

http://www.ISAserver.org


Deleting a protocol definition would not do anything unless it has an
associated Protocol rule. It does not matter what you block with
protocol rules and packet filters except http port 80. Messenger just
uses http and the proxy service if it cannot use it's own protocol.

I have now solved my problem by banning ("*.msgr.hotmail.com" /*)this is
the DNS name that messenger uses to connect.

Thanks to everyone for your ideas,

Carson Reid

-----Original Message-----
From: Mike Mo [mailto:MMo@xxxxxxx]
Sent: Wednesday, May 08, 2002 11:31 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: MSN Messenger using HTTP


http://www.ISAserver.org


if you are not gonna to allow MSN messenger in whole network, try delete
MSN protocol definition if it is defined by yourself. 
Or in Protocol Rules, disenable Allow All, and allow only those you want
to 
Or Allow "All IP Traffic except selected" to exclude MSN Message.

Remember after change the rules, you need stop and start firewall and
web proxy services to enable the changes.

-----Original Message-----
From: Randy Seibert [mailto:rseibert@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 07, 2002 11:19 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: MSN Messenger using HTTP


http://www.ISAserver.org


Wow..We had about 4 users here that abused the crap out of messenger I
used the default rule that comes with ISA and blocked *.msn.com and I
even tried all methods to connect myself with no success.

-Randy

----- Original Message -----
From: "Carson Reid" <creid@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, May 07, 2002 10:12 AM
Subject: [isalist] Re: MSN Messenger using HTTP


http://www.ISAserver.org


Tried that, it did not solve the problem =)

Carson Reid, MCSE,MCSA,A+
Network Administrator
Herzing College Winnipeg Campus
LEARN.EARN.WIN.
PHONE: 204.775.8175
FAX: 204.783.8107
Creid@xxxxxxxxxxxxxxx



-----Original Message-----
From: Randy Seibert [mailto:rseibert@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 07, 2002 10:06 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: MSN Messenger using HTTP

http://www.ISAserver.org


Block *.msn.com

----- Original Message -----
From: "Carson Reid" <creid@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, May 07, 2002 9:56 AM
Subject: [isalist] MSN Messenger using HTTP


http://www.ISAserver.org


Hello everyone,

So, I've used the predefined protocol definitions to block MSN
messenger, but my clients still get through. I create packet filters to
block the ports that messenger uses and my clients still get through. I
check the messenger connection status and it says that it is using HTTP
to communicate. My clients can even transfer files via HTTP with
messenger. If anyone knows how to block this, please let me know.

Carson Reid, MCSE,MCSA,A+
Network Administrator
Herzing College Winnipeg Campus
LEARN.EARN.WIN.
PHONE: 204.775.8175
FAX: 204.783.8107
Creid@xxxxxxxxxxxxxxx

-----Original Message-----
From: Eric Lanyon [mailto:elanyon@xxxxxxx] 
Sent: Wednesday, May 08, 2002 12:37 PM
To: [ExchangeList]
Subject: [exchangelist] Messaging Question

http://www.MSExchange.org/


On Exchange, it can integrate with Messenger, right?  Can you set it up
so the clients can not "chat" with those external to the company?  How?


------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
matt.walkowiak@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


Other related posts: