I have seen just blocking 1863/TCP kills this monstrosity.. However I prefer routing all the blocks MSN allocates for the program to NULL 0
ip route 207.46.106.0 255.255.255.0 null0 ip route 207.68.171.0 255.255.255.0 null0 You will find others once these are killed, just keep looking for others the program tries to contact and route those to null as well. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57623&t=57595 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]