IM Ports - How to block?

[Diaonic]

Hi,

My current situation is, im running a sonic wall. And i need to block all instant messangers could somone provide me with a port list so i can shut these things down.

The messangers im talking about are :
ICQ, AIM, MSN, Trillian ect...

Thanks

 

[spidey07]

you can block the ports they use but unfortunately they can operate over port 80 (http) so you really can't totally block them.

 

[Diaonic]

I thought you could block the login server ips an it wouldn't allow them to connect?

 

[RhythmAddict]

Originally posted by: Diaonic
I thought you could block the login server ips an it wouldn't allow them to connect?

I haven't tried this - but I always thought it'd work too...
I know you login to "login.oscar.aol" (or something like that) for AIM - I think you could just tracert that and block all those IP's...
Anyone effectively done this?

 

[Diaonic]

i just finished blocking yahoo messenger, there was like 15 unique ips i had to block, and then 1 range of 20 ips i had to block. And when i load it up it doesnt connect. But if somone is smart they can go into the settings an turn on a firewall options to use http requests an it works again .

If anyone knows how to fix this would be much appreciated.

Thanks

 

[Diaonic]

Ok so i got all the messengers blocked. And this is how i did it.

You need to find out the login server for each messenger, once you have it. Do nslookup from dos prompt type in the login server. I.E login.icq.com. And block all the ips that it lists. The only one that was a real pain was yahoo. The rest of them were between 1-5 ips.

 

[raftman]

Originally posted by: Diaonic
Ok so i got all the messengers blocked. And this is how i did it.

You need to find out the login server for each messenger, once you have it. Do nslookup from dos prompt type in the login server. I.E login.icq.com. And block all the ips that it lists. The only one that was a real pain was yahoo. The rest of them were between 1-5 ips.

how does this get around the user changing the firewall settings to try http requests you mentioned in the post before?

 

[Diaonic]

With Yahoo it doesn't, with the other ones you can't change it. Atleast if you can, I havn't found it yet.