RE: How can I block Yahoo Messenger

  • From: "Nabil, Ahmed" <anmahmou@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 24 May 2004 18:03:56 +0300

Thanks Tom, so you think the only solution is to disable the Socks filter from 
Extensions - Application filters ?

Ahmed

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Monday, May 24, 2004 5:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: How can I block Yahoo Messenger


http://www.ISAserver.org

Hi Ahmed,

The client must be able to use the SOCKS filter on the ISA Server 2000
firewall in order for the application to use SOCKS 4. However, I suppose
that enterprising users might try to subvert your access control by
trying to use an open SOCKS proxy somewhere on the Internet (note that
users do not connect to a SOCKS server on AOL, etc). So, your idea to
block 1080 is OK to prevent them from using that port to connect to
external SOCKS proxies, but it won't have any effect on preventing
connections to the ISA Server 2000 firewall's SOCKS proxy.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx] 
Sent: Monday, May 24, 2004 9:12 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: How can I block Yahoo Messenger


http://www.ISAserver.org

Tom,

Do you mean the Socks filter under Extensions - Application filters.

I was thinking of blocking the 1080 port. What do you think ?


Thanks for your help,

Ahmed

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Monday, May 24, 2004 4:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: How can I block Yahoo Messenger


http://www.ISAserver.org

Hi Ahmed,

Disable the SOCKS filter.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp


-----Original Message-----
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx] 
Sent: Monday, May 24, 2004 7:43 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: How can I block Yahoo Messenger


http://www.ISAserver.org

Many Thanks. It worked fine.

What about the MSN Messenger. I blocked it on the ISA but when I play
around in the connections TAB and I check I use proxy then I choose
Socks and in the IP address I add the loop back address, it works fine
!!!!!!! Any suggestions ??

Thanks again.

Ahmed
-----Original Message-----
From: mathif@xxxxxxxxxxxxxxx [mailto:mathif@xxxxxxxxxxxxxxx]
Sent: Monday, May 24, 2004 3:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: How can I block Yahoo Messenger


http://www.ISAserver.org

Salaam Nabil, 
I know itz very annoying, but don't worry, here are few steps which you
need to follow. The problem with Yahoo Messenger is once you block port
5050 Outbound, it will keep trying other ports which will also slow down
your network.
Here you go... 
1. In ISA MMC, browse thru Policy Elements - Destinationset- Create New
Set- Deny Yahoo- ADD- 
A) shttp.msg.yahoo.com 
B) shttp.msg.yahoo.com/notify 
C) insider.msg.yahoo.com 
D) update.messenger.yahoo.com 
E) us.dl1.yimg.com 
F) us.update.companion.yahoo.com 
G) ypager.exe (IMPORTANT) 
H) yupdater.exe (IMPORTANT) 
2. Now, browse thru Accesspolicy-Site&ContentRule-NewRule-Deny
Yahoo-Deny-Custom-Specified Destinationset-Deny Yahoo to any request
You are done, You may want to restart isactrl, and try to login to your
Yahoo Messenger. This shuld work...! 
Good Luck.! 
Regards, 
Mohammed Athif Khaleel 
Asst.Network Engineer 
AlFaisaliah Group Information Technology 
Tel.: +966-1-461-0077 x.209 
Moble.: +966-509774015 
Email: mathif@xxxxxxxxxxxxxxx 
"Save Internet, Keep all the systems patched" 
Web: http://alfaisaliah.com 


-----Original Message----- 
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx] 
Sent: Monday, 24 May 2004 2:01 PM 
To: [ISAserver.org Discussion List] 
Subject: [isalist] How can I block Yahoo Messenger 


http://www.ISAserver.org 
Good morning All, 
This is very annoying issue. How can I block Yahoo Messenger for Web
Proxy clients. I created a protocol rule and I blocked the TCP 5050 for
inbound and outbound but still the users can access Yahoo messenger.
Please advice. 
Thanks, 
Ahmed 
-----Original Message----- 
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Monday, May 24, 2004 11:01 AM 
To: [ISAserver.org Discussion List] 
Subject: [isalist] Message Screener 


http://www.ISAserver.org 
Is there a way to configure so as to have the message screener scan
outbound as well as inbound? 
John Tolmachoff 
Engineer/Consultant/Owner 
eServices For You 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
anmahmou@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
anmahmou@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: