Are you sure that there isn't anything else in your rule-base cancelling
this out? I have used it and it worked.

Do me  a favour and move your block rule to the top of your rule-base
and push the policy and try again. Any difference?

-----Original Message-----
From: theG man [mailto:[EMAIL PROTECTED]
Sent: 11 May 2004 20:22
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] how to block MSN, AOL, Yahoo messenger with R54 or
R55


Hi all,
Just noticed, Yahoo messenger works too,
On NG R54 or R55, there is a group called messenger service, which are
AOL, Yahoo messenger,and MSN, I checked them all, aftter creating the
rule like   ANY  ANY  messenger services  DROP,,,,  AOL is not working,
thats fine, but as I mentioned in my privouse email, MSN keeps working,
and just noticed Yahoo messenger works too.
The funny thing is Yahoo, or MSN traffic goes over Telnet, HTTP or any
port which are not blocked (by that Messenger serivices group) I just
read somewhere, You need to block by IP address of the servers,
otherwise, these chat services find different port everytime to
comunicate. anyone has a better Idea?



theG man <[EMAIL PROTECTED]> wrote:
Hi everyone,
I know R54 and R55, has a group for Messenger services, like AOL, Yahoo,
and MSN, after creating the rule and pushing policy, YAHOO and AOL not
working but MSN still working, any idea? does anyone knows what servers
(IP addresses) MSN messenger uses, so I can block them by IP addresses.
FYI_Checkpoint knowledgebase IP addresses for MSN is not updated and is
old. what would be the command for nslookup to get the server IP
addresses for MSN messenger? thanks





---------------------------------
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

---------------------------------
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

The information transmitted is intended only for the person or entity
to which it is addressed and may contain confidential and/or
privileged material. Any use (including retransmission or copying)
of this information by persons or entities other than the intended
recipient is prohibited.  If you are not the intended recipient of this
transmission, please contact the sender and delete the material
from any computer. The sender is not responsible for the
completeness or accuracy of this communication as it has been
transmitted over a public network. Any replies to this email may be
monitored by the MCPS-PRS Alliance for quality control and other
purposes.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to