I didn't research this, but I recall writing snort rules for TCP 1863 for MSN messenger. I believe this did capture the messages. There are other ports utilized for file transfers as well I believe.
Brian's idea is good to, but if you don't have access to this then you could always fire up messenger and then check SmartView Tracker and see what ports and to whom it's connecting then you can enable rules to account for these, then identify again. Our current firewall rules allow most external traffic, inbound traffic is blocked. I believe the only problem we have is if you try to transfer a file through messenger it doesn't work. But I believe that is a good thing! Derek -----Original Message----- From: Brian Bohanna [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 10, 2004 10:53 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] MSN Messanger Get ethereal (free download) and install it on a machine you want to use msn on and watch for which ports are used when launching the application, then open those ports on the firewall outbound, or add them you your allowable services group. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Lars Troen Sent: Tuesday, February 10, 2004 9:01 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] MSN Messanger We're using MSN Messenger over vpn to our internal corporate Messenger server and it works fine. What problems are you experiencing? Lars -----Original Message----- From: Dahl-Stamnes J�rn [mailto:[EMAIL PROTECTED] Sent: 10. februar 2004 09:03 To: [EMAIL PROTECTED] Subject: [FW-1] MSN Messanger I'm trying to find out how to run MSN Messanger through a FW-1. Can't find any information on the Microsofts web-pages about messanger and firewalls setup. Anyone who have done it or can give me any information about it? Thanks. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
