Security Basics mailing list archives

Re: how to block ALL AIM traffic ?


From: Netops <michael () bluesuperman com>
Date: Mon, 02 May 2005 22:23:50 -0600


Decent application level filters can block proxies such as socks connections and HTTP tunneling software. The hardest ones are the ones the use the "CONNECT" method which most SSL sites use in order to function through web proxies.

That can be blocked by only allowing the CONNECT method on port 443 and restricting SSL connections to required servers such as banks, airlines or other approved sites by managers.

Michael


Jesus wrote:
On Thu, 28 Apr 2005, david kuhlman wrote:


Why don't you just block connections to oscar.login.aol.com?

That works for us.

David Kuhlman


Considering anyone can bypass blocks with a proxy, little you can do
without digging into packet specifics, to block AIM traffic.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
"The most tyrannical of governments are those which make
crimes of  opinions, for everyone has an inalienable
right to his thoughts." -- Benedict Spinoza


//sil

http://www.kungfunix.net   http://www.politrix.org
http://www.infiltrated.net http://bush.shafted.us



Current thread: