Effective ipfw rules for blocking MSN Messenger ... ?

2004-12-23 Thread Marc G. Fournier
I just setup a FreeBSD box for a router, so that I could make use of ipfw 
to block MSN Messenger traffic ... but I'm having a bugger of a time 
finding a "definitive" list of what needs to be blocked :(

MSN Messenger appears to be smart enough to go *around* the usual port 
1863 and onto port 80 if it needs to ...

Can someone that has successfully done this using ipfw send me a list of 
rules, since obviously I'm not catching it :(

Thanks ...

Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
Email: [EMAIL PROTECTED]   Yahoo!: yscrappy  ICQ: 7615664
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Effective ipfw rules for blocking MSN Messenger ... ?

2004-12-23 Thread Chuck Swiger
Marc G. Fournier wrote:
I just setup a FreeBSD box for a router, so that I could make use of 
ipfw to block MSN Messenger traffic ... but I'm having a bugger of a 
time finding a "definitive" list of what needs to be blocked :(

MSN Messenger appears to be smart enough to go *around* the usual port 
1863 and onto port 80 if it needs to ...
Apparently the best way to accomplish this goal is to block all traffic to and 
from the MSN boxes, rather than trying to filter by port #.  I thought I had a 
list of those IPs handy, but I can't find it...

--
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Effective ipfw rules for blocking MSN Messenger ... ?

2004-12-23 Thread Tom Connolly


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Swiger
Sent: Thursday, December 23, 2004 3:33 PM
To: Marc G. Fournier
Cc: freebsd-questions@freebsd.org
Subject: Re: Effective ipfw rules for blocking MSN Messenger ... ?


Marc G. Fournier wrote:
> I just setup a FreeBSD box for a router, so that I could make use of
> ipfw to block MSN Messenger traffic ... but I'm having a bugger of a 
> time finding a "definitive" list of what needs to be blocked :(

I believe that MSN Messenger dynamically allocates ports.  I know this
is true for audio and video communications.  The standard SIP port is
5060 if that helps.

Tom

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Effective ipfw rules for blocking MSN Messenger ... ?

2004-12-23 Thread Tom Connolly
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Swiger
Sent: Thursday, December 23, 2004 3:33 PM
To: Marc G. Fournier
Cc: freebsd-questions@freebsd.org
Subject: Re: Effective ipfw rules for blocking MSN Messenger ... ?


Marc G. Fournier wrote:
> I just setup a FreeBSD box for a router, so that I could make use of 
> ipfw to block MSN Messenger traffic ... but I'm having a bugger of a 
> time finding a "definitive" list of what needs to be blocked :(

I believe that MSN Messenger dynamically allocates ports.  I know this
is true for audio and video communications.  The standard SIP port is
5060 if that helps.

Tom

One more thing to clarify.

I think by blocking the SIP port you could stop Messenger from receiving
contact presence information and hence, block Messenger.

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"