[isalist] Re: For Blocking MSN Messenger File Transfers, TOM Said;

  • From: Faraz Hassan Khan <f_hkhan@xxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Tue, 28 Mar 2006 07:34:30 -0800 (PST)

hi Dr.
  i am wondring, why HTTP Filtring not working, while i am adding new 
signatures just as you told below, i even did the packet trace to see whether 
the headers are still same, and those are same, but still my firewall clients 
are able to send/recieve file through MSN Messenger...Now what could be the 
possible cause???????
   
  Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
      Header  Content-Type: 
   
  Signature  application/x-msnmsgrp2p
   
  Request header.
  and
  Response header
   
  Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
   

      
---------------------------------
  From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Faraz Hassan Khan
Sent: Wednesday, March 22, 2006 9:41 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: For Blocking MSN Messenger File Transfers, TOM Said;


  
  Well may be(I Think NOT)... But when you defined those signatures, what was 
your search criteria while adding new signature?
   
  Search in : ?
  HTTP header : ?
  Signature : ?
  

Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
      Maybe things have changed. Do a packet trace to see what headers are 
being used now.
   
  Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
   

      
---------------------------------
  From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Faraz Hassan Khan
Sent: Wednesday, March 22, 2006 9:27 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] For Blocking MSN Messenger File Transfers, TOM Said;


  
  Hi EveryOne
  For Blocking MSN Messenger File Transfers, TOM Said;
  All you need to do is configure the HTTP Security Filter with a signature to 
block the following Host Header:
/x-msnmsgrp2p
   
  Now i have Access Rule(Allows Internal to external Only HTTP & HTTPS), while 
adding a new signature, what should be the signature search criteria?
  1.
  Search in : Request headers 
  HTTP header : /x-msnmsgrp2p
  Signature : MSN Messenger
   
  2.Search in : Request URL 
  Signature :  /x-msnmsgrp2p
   
  3.
  Search in : Request headers 
  HTTP header : /x-msnmsgrp2p
  Signature : /x-msnmsgrp2p
   
  I have checked all these combinations of signature search criterias, but NOT 
WORKING!
    
---------------------------------
  Yahoo! Travel
Find great deals to the top 10 hottest destinations!

    
---------------------------------
  Yahoo! Mail
Use Photomail to share photos without annoying attachments.

                
---------------------------------
New Yahoo! Messenger with Voice. Call regular phones from your PC for low, low 
rates.

Other related posts: