cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
288
Views
0
Helpful
2
Replies

Blocking hotmail messenger

davisdev
Level 1
Level 1

Hi,

I have a simple question (I think), How can I block the messenger services from hotmail and yahoo? I appreciate your response.

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

Here's a good link on blocking a number of messenging applications:

http://testweb.oofle.com/messaging/index.htm

Apply these port and address filters on your inside interface, that'll stop people being able to connect.

MSN is pretty easy because it uses a fixed port. Some (like Yahoo pager) are difficult because they will find a port that is open. To block the tricky ones, you have to block all of the hosts that they will conect to at the top of your outbound access list (inside interface). I have written one that blocks all of the IM programs using an object-group, so when a new site is discovered, I just add it to the group. For Yahoo IM, I wrote a Perl script to generate a list of all of the yahoo hosts that contained "msg" anywhere in the host name and pre-pend the corresponding IP with network-object host x.x.x.x . Here is the object-group:

object-group network bad_sites

description Sites used for peer to peer and IM.

network-object host 152.163.241.128

network-object host 152.163.241.120

network-object host 152.163.242.24

network-object host 152.163.242.28

network-object host 216.136.225.238

network-object host 66.163.172.51

network-object host 66.163.172.50

network-object host 216.136.232.153

network-object host 216.136.232.154

network-object host 216.136.233.129

network-object host 216.136.226.208

network-object host 216.136.233.128

network-object 128.121.26.0 255.255.255.0

network-object host 66.12.161.185

network-object host 66.12.161.153

network-object host 64.58.78.151

network-object host 64.58.79.23

network-object host 64.58.79.25

network-object host 64.58.79.26

network-object host 64.58.79.27

network-object host 64.58.78.224

network-object host 64.58.78.225

network-object host 64.58.78.226

network-object host 64.58.78.150

network-object host 64.58.77.57

network-object host 64.58.78.227

network-object host 64.58.78.228

network-object host 205.188.179.233

network-object host 64.12.200.89

network-object host 216.136.172.75

network-object host 216.136.172.163

network-object host 216.136.172.221

network-object host 216.136.172.222

network-object host 216.136.172.223

network-object host 216.136.172.224

network-object host 216.136.172.225

network-object host 216.136.172.226

network-object host 216.136.172.227

network-object host 216.136.172.228

network-object host 216.136.172.248

network-object host 216.136.172.249

network-object host 216.136.172.250

network-object host 216.136.172.251

network-object host 216.136.172.252

network-object host 216.136.172.253

network-object host 216.136.173.16

network-object host 216.136.173.93

network-object host 216.136.173.107

network-object host 216.136.173.141

network-object host 216.136.173.142

network-object host 216.136.173.161

network-object host 216.136.173.162

network-object host 216.136.173.163

network-object host 216.136.173.164

network-object host 216.136.173.168

network-object host 216.136.173.169

network-object host 216.136.173.170

network-object host 216.136.173.171

network-object host 216.136.173.172

network-object host 216.136.173.173

network-object host 216.136.173.174

network-object host 216.136.173.179

network-object host 216.136.173.180

network-object host 216.136.173.181

network-object host 216.136.173.182

network-object host 216.136.173.183

network-object host 216.136.173.184

network-object host 216.136.173.185

network-object host 216.136.173.186

network-object host 216.136.174.50

network-object host 216.136.174.83

network-object host 216.136.174.237

network-object host 216.136.174.238

network-object host 216.136.174.239

network-object host 216.136.174.240

network-object host 216.136.174.253

network-object host 216.136.174.254

network-object host 216.136.175.132

network-object host 216.136.175.142

network-object host 216.136.175.143

network-object host 216.136.175.144

network-object host 216.136.175.145

network-object host 216.136.175.226

network-object host 216.136.175.229

network-object host 64.58.79.24

network-object host 66.163.168.105

network-object host 66.163.168.107

network-object host 66.163.168.116

network-object host 66.163.168.117

network-object host 66.163.168.118

network-object host 66.163.169.134

network-object host 66.163.169.135

network-object host 66.163.169.136

network-object host 66.163.169.137

network-object host 66.163.169.141

network-object host 66.163.169.142

network-object host 66.163.169.143

network-object host 66.163.169.148

network-object host 66.163.169.149

network-object host 66.163.169.150

network-object host 66.163.169.212

network-object host 66.163.169.213

network-object host 66.163.169.228

network-object host 66.163.169.229

network-object host 66.163.169.238

network-object host 66.163.169.246

network-object host 66.163.169.247

network-object host 66.163.169.248

network-object host 66.163.169.249

network-object host 66.163.172.71

network-object host 66.163.172.76

network-object host 66.163.172.77

network-object host 66.163.172.80

network-object host 66.163.172.81

network-object host 66.163.172.82

network-object host 66.163.172.83

network-object host 66.163.172.84

network-object host 66.163.172.93

network-object host 66.163.172.94

network-object host 66.163.172.99

network-object host 66.163.172.100

network-object host 66.163.172.101

network-object host 66.163.172.102

network-object host 66.163.172.117

network-object host 66.163.173.1

network-object host 66.163.173.2

network-object host 66.163.173.3

network-object host 66.163.173.4

network-object host 66.163.173.5

network-object host 66.163.173.6

network-object host 66.163.173.7

network-object host 66.163.173.8

network-object host 66.163.173.9

network-object host 66.163.173.10

network-object host 66.163.173.11

network-object host 66.163.173.12

network-object host 66.163.173.13

network-object host 66.163.173.14

network-object host 66.163.173.15

network-object host 66.163.173.16

network-object host 66.163.173.18

network-object host 66.163.173.20

network-object host 66.163.173.21

network-object host 66.163.173.22

network-object host 66.163.173.23

network-object host 66.163.173.30

network-object host 66.163.173.31

network-object host 66.163.173.76

network-object host 66.163.173.77

network-object host 66.163.173.78

network-object host 66.163.173.79

network-object host 66.163.173.80

network-object host 66.163.173.81

network-object host 66.163.173.82

network-object host 66.163.173.83

network-object host 66.163.173.84

network-object host 66.163.173.85

network-object host 66.163.173.86

network-object host 66.163.173.87

network-object host 66.163.173.88

network-object host 66.163.173.89

network-object host 66.163.173.90

network-object host 66.163.173.91

network-object host 66.163.173.92

network-object host 66.163.173.93

network-object host 66.163.173.94

network-object host 66.163.173.95

network-object host 66.163.173.96

network-object host 66.163.173.97

network-object host 66.163.173.98

network-object host 66.163.173.99

network-object host 66.163.173.130

network-object host 66.163.173.131

network-object host 66.163.173.132

network-object host 66.163.173.133

network-object host 66.163.173.134

network-object host 66.163.173.135

network-object host 66.163.173.136

network-object host 66.163.173.137

network-object host 66.163.173.138

network-object host 66.163.173.139

network-object host 66.163.173.140

network-object host 66.163.173.141

network-object host 66.163.173.142

network-object host 66.163.173.143

network-object host 66.163.173.144

network-object host 66.163.173.145

network-object host 66.163.173.146

network-object host 66.163.173.147

network-object host 66.163.173.148

network-object host 66.163.173.149

network-object host 66.163.173.150

network-object host 66.163.173.151

network-object host 66.163.173.152

network-object host 66.163.173.153

network-object host 66.163.173.154

network-object host 66.163.173.155

network-object host 66.163.173.156

network-object host 66.163.173.157

network-object host 66.163.173.158

network-object host 66.163.173.159

network-object host 66.163.173.160

network-object host 66.163.173.161

network-object host 66.163.173.162

network-object host 66.163.173.163

network-object host 66.163.173.164

network-object host 66.163.173.165

network-object host 66.163.173.167

network-object host 66.163.173.168

network-object host 66.163.173.169

network-object host 66.163.173.170

network-object host 66.163.173.171

network-object host 66.163.173.172

network-object host 66.163.173.173

network-object host 66.163.173.174

network-object host 66.163.173.175

network-object host 66.163.173.176

network-object host 66.163.173.177

network-object host 66.163.173.178

network-object host 66.163.173.179

network-object host 66.163.173.180

network-object host 66.163.173.181

network-object host 66.163.173.182

network-object host 66.163.173.183

network-object host 66.163.173.184

network-object host 66.163.173.185

network-object host 66.163.173.186

network-object host 66.163.173.187

network-object host 66.163.173.192

network-object host 66.163.173.193

network-object host 66.163.173.196

network-object host 66.163.173.197

network-object host 66.163.173.198

network-object host 66.163.173.199

network-object host 66.163.173.200

network-object host 66.163.173.201

network-object host 66.163.173.202

network-object host 66.163.173.203

network-object host 66.163.173.210

network-object host 66.163.173.211

network-object host 66.163.173.212

network-object host 66.163.173.213

network-object host 66.163.173.214

network-object host 66.163.173.215

network-object host 66.163.173.216

network-object host 66.163.173.217

network-object host 66.163.173.218

network-object host 66.163.173.219

network-object host 66.163.173.220

network-object host 66.163.173.221

network-object host 66.163.173.222

network-object host 66.163.173.223

network-object host 66.163.173.224

network-object host 66.163.173.225

network-object host 66.163.173.226

network-object host 66.163.173.227

network-object host 66.163.173.228

network-object host 66.163.173.229

network-object host 66.163.173.230

network-object host 66.163.173.231

network-object host 66.163.173.232

network-object host 66.163.173.233

network-object host 66.163.173.234

network-object host 66.163.173.235

network-object host 216.136.224.134

network-object host 216.136.224.142

network-object host 216.136.224.143

network-object host 216.136.224.212

network-object host 216.136.224.213

network-object host 216.136.224.214

network-object host 216.136.224.235

network-object host 216.136.224.236

network-object host 216.136.224.248

network-object host 216.136.225.11

network-object host 216.136.225.12

network-object host 216.136.225.26

network-object host 216.136.225.27

network-object host 216.136.225.28

network-object host 216.136.225.35

network-object host 216.136.225.36

network-object host 216.136.225.83

network-object host 216.136.225.84

network-object host 216.136.225.185

network-object host 216.136.225.186

network-object host 216.136.225.187

network-object host 216.136.225.188

network-object host 216.136.225.189

network-object host 216.136.225.190

network-object host 216.136.225.191

network-object host 216.136.225.192

network-object host 216.136.225.193

network-object host 216.136.225.194

network-object host 216.136.225.217

network-object host 216.136.225.221

network-object host 216.136.225.236

network-object host 216.136.225.237

network-object host 216.136.226.10

network-object host 216.136.226.11

network-object host 216.136.226.12

network-object host 216.136.226.13

network-object host 216.136.226.14

network-object host 216.136.226.15

network-object host 216.136.226.16

network-object host 216.136.226.17

network-object host 216.136.226.18

network-object host 216.136.226.19

network-object host 216.136.226.20

network-object host 216.136.226.21

network-object host 216.136.226.22

network-object host 216.136.226.23

network-object host 216.136.226.117

network-object host 216.136.226.118

network-object host 216.136.226.205

network-object host 216.136.226.206

network-object host 216.136.226.207

network-object host 216.136.226.209

network-object host 216.136.226.210

network-object host 216.136.226.254

network-object host 216.136.227.11

network-object host 216.136.227.12

network-object host 216.136.227.20

network-object host 216.136.227.21

network-object host 216.136.227.22

network-object host 216.136.227.23

network-object host 216.136.227.24

network-object host 216.136.227.25

network-object host 216.136.227.28

network-object host 216.136.227.30

network-object host 216.136.227.31

network-object host 216.136.227.44

network-object host 216.136.227.45

network-object host 216.136.227.46

network-object host 216.136.227.50

network-object host 216.136.227.74

network-object host 216.136.227.75

network-object host 216.136.227.76

network-object host 216.136.227.77

network-object host 216.136.227.78

network-object host 216.136.227.79

network-object host 216.136.227.121

network-object host 216.136.227.122

network-object host 216.136.227.123

network-object host 216.136.227.124

network-object host 216.136.227.125

network-object host 216.136.227.126

network-object host 216.136.227.142

network-object host 216.136.227.160

network-object host 216.136.227.161

network-object host 216.136.227.162

network-object host 216.136.227.163

network-object host 216.136.227.166

network-object host 216.136.227.167

network-object host 216.136.227.168

network-object host 216.136.128.144

network-object host 216.136.128.145

network-object host 216.136.128.167

network-object host 216.136.130.46

network-object host 216.136.131.64

network-object host 216.136.131.65

network-object host 216.136.131.66

network-object host 216.136.131.67

network-object host 216.136.131.78

network-object host 216.136.131.79

network-object host 216.136.131.88

network-object host 216.136.131.89

network-object host 216.136.131.90

network-object host 216.136.131.91

network-object host 216.136.131.108

network-object host 216.136.131.109

network-object host 216.136.131.110

network-object host 216.136.131.111

network-object host 216.136.131.112

network-object host 216.136.131.113

network-object host 216.136.131.114

network-object host 216.136.131.115

network-object host 216.136.131.116

network-object host 216.136.131.117

network-object host 216.136.131.118

network-object host 216.136.131.119

network-object host 216.136.131.198

network-object host 216.136.131.199

network-object host 216.136.131.200

network-object host 216.136.131.201

network-object host 216.136.131.202

network-object host 216.136.131.203

network-object host 216.136.131.212

network-object host 216.136.131.228

network-object host 216.136.131.229

network-object host 216.136.232.136

network-object host 216.136.232.137

network-object host 216.136.232.138

network-object host 216.136.232.139

network-object host 216.136.232.140

network-object host 216.136.232.141

network-object host 216.136.232.162

network-object host 216.136.232.165

network-object host 216.136.233.130

network-object host 216.136.233.131

network-object host 216.136.233.132

network-object host 216.136.233.133

network-object host 216.136.233.134

network-object host 216.136.233.135

network-object host 216.136.233.136

network-object host 216.136.233.137

network-object host 216.136.233.138

network-object host 216.136.233.140

network-object host 216.136.233.141

network-object host 216.136.233.148

network-object host 216.136.233.150

network-object host 216.136.233.151

network-object host 216.136.233.152

network-object host 216.136.233.153

network-object host 216.136.233.154

network-object host 216.136.233.155

network-object host 216.136.233.156

network-object host 216.136.233.157

network-object host 216.136.233.158

network-object host 216.136.233.159

network-object host 216.136.233.160

network-object host 216.136.233.161

network-object host 216.136.233.162

network-object host 216.136.233.163

network-object host 216.136.233.164

network-object host 216.136.233.165

network-object host 216.136.233.166

network-object host 216.136.233.167

network-object host 216.136.233.168

network-object host 216.136.233.169

network-object host 216.136.233.170

network-object host 216.136.233.171

network-object host 216.136.233.172

network-object host 216.136.233.173

network-object host 216.136.233.174

network-object host 216.136.233.175

network-object host 216.136.233.176

network-object host 216.136.233.177

network-object host 216.136.233.178

network-object host 216.136.233.179

network-object host 216.136.233.180

network-object host 216.136.233.181

network-object host 216.136.233.182

network-object host 216.136.233.183

network-object host 216.136.233.184

network-object host 216.136.233.185

network-object host 216.136.233.186

network-object host 216.136.233.187

network-object host 216.136.233.188

network-object host 216.136.233.189

network-object host 216.136.233.190

network-object host 216.136.233.191

Copy and past this into your Pix config and plant an acl like this at the top of your outbound list:

access-list outbound deny ip any object-group bad_sites

This question gets asked a lot on this forum. Perhaps there should be a security tech tip on this.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: