So true but ICQ is using port 80, which kills me
-Original Message-
From: Creighton Bill-BCREIGH1 [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 29, 2002 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
Make sure that you carefully figure out
Yep all steps you stated have been covered, but Employees will be
employees.
What can I say?
-Original Message-
From: Elijah Savage III [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 3:49 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
ICQ
]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
In a complex organization ( complex not meaning size or number of
departments, but in the way people need to work ) one might consider third
party applications such as Web Sense.
A couple of comments below:
--
TANSTAAFL
there ain't
:[EMAIL PROTECTED]]
Sent: Saturday, August 31, 2002 1:20 AM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
In a complex organization ( complex not meaning size or number of
departments, but in the way people need to work ) one might consider third
party applications
ong Road [mailto:[EMAIL PROTECTED]]
Sent: Saturday, August 31, 2002 1:20 AM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
In a complex organization ( complex not meaning size or number of
departments, but in the way people need to work ) one might consider thir
PROTECTED]]
Sent: Thursday, August 29, 2002 7:50 PM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
Here is how I get around ICQ, AOL, MSN and Yahoo IM blocking:
From work, I Secure Shell (SSH) back to my Linux Firewall. On my work
desktop,
I am running X-server (X-Win32
: Thursday, August 29, 2002 7:50 PM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
Here is how I get around ICQ, AOL, MSN and Yahoo IM blocking:
From work, I Secure Shell (SSH) back to my Linux Firewall. On my work
desktop,
I am running X-server (X-Win32 or Xceed) and just
, but I never tire of it...
Thanks
Larry
-Original Message-
From: mike greenberg [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 2:18 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
If port 80 is open for outbound, I can change the ssh port
PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
Try my approach..
Tell people no and put it in your security policy. They violate the policy
they get fired..
Oh wait a minute, I think that goes along with cut-off desktop internet
access I guess.
Its is a VERY effective deterrent
I may be off my rocker, but I think it's possible that you could set up
an IDS system that blocks access to any IP on the outside that sends
packets to your network that look like ICQ. At the very least it could
record the addresses for future inclusion into ACLs.
This won't block the people
-Original Message-
From: Creighton Bill-BCREIGH1 [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 3:17 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
Trust me, for every way you can find out, I can find a way to block it.
We may play cat and mouse
especially if it is causing
problems for you on the network and putting business assets at risk.
-Original Message-
From: Shawn Heisey [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 4:21 PM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]
I may be off
to
deal with.
CL You gots to know your organization.
Thanks
Larry
-Original Message-
From: mike greenberg [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 2:18 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]
If port 80 is open for out
Hi Cisco gods,
I have successfully blocked all chat services at the PIX firewall, I
think. As I walk around and find people using MSN or Messenger I find
that public proxy they are using and kill it too. BUT, I am having a
hell of a time with ICQ. I do have all the ports UDP and TCP blocked so
Rob,
Currently we use MS Proxy server to restrict Internet access so I,
unfortunately, do not have your answer. Your offer to post your ACL for
peer-to-peer blocking would be very appreciated though. Soon we will be
removing Proxy and allowing our new PIX to restrict Internet access. At that
To: [EMAIL PROTECTED]
Subject: ICQ and blocking the thing-PIX [7:52285]
Hi Cisco gods,
I have successfully blocked all chat services at the PIX firewall, I
think. As I walk around and find people using MSN or Messenger I find
that public proxy they are using and kill it too. BUT, I am having a
hell
Here is how I get around ICQ, AOL, MSN and Yahoo IM blocking:
From work, I Secure Shell (SSH) back to my Linux Firewall. On my work
desktop,
I am running X-server (X-Win32 or Xceed) and just tunnel the SSH encryption
from my Linux firewall back to the corporate desktop. I can fire up any X
17 matches
Mail list logo
