If you just want to have them Chat... then don't get ICQ... get IRC (Internet Relay Chat).

You can set your own server up... there are a couple free servers (usually on Linuks) or commercial but still reasonable cheap IRC Daemons for NT (www.webmaster.com). You can set mode +x for all users 

--> *@* <--

so the users won't even see each others IP addresses. 

The Port to allow is 6667 (but can be changed if you like) and the ports to block are DCC filesends and DCC-talks.

A good IRC client is Pirch (www.pich.org), Mirc is also cool (www.mirc.co.uk)

Cheers

Boris Pavalec [QPB]
Network / System Engineer [MCSE]
Highend Computing Systems
Switzerland - Zuerich

http://www.nt-admin.net
info@nt-admin.net

-----Original Message-----
From: security [mailto:security@kokoro.com]
Sent: Mittwoch, 2. Juni 1999 07:06
To: firewalls
Cc: security
Subject: UNAUTHENTICATED: Chat-Only ICQ through a firewall

Hi,

I'm looking for a way to allow ICQ to go through a firewall (probably the
Elron firewall, though we haven't made a final decision yet).  I've heard
a lot of baaaad things about what running ICQ can do for your
vulnerability, so what I'd like to do is limit the client to doing ICQ
chat.  No sending URLs, no sending files, no sending
<insert-latest-bloatware-feature-here>.  Just chat.

Is this possible?  What are people's thoughts on whether/how much this
would improve the security of using ICQ?  (It seems to me that by only
allowing chat messages through, the worst someone could do is a DoS
attack...)

Thanks for any advice,

Richard

PS: If anyone has any advice or experiences to share with me concerning
the Elron firewall, I'd love to hear them!

-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]