Security Basics mailing list archives

Re: how to block web messenger services


From: Mathew Rowley <mathew.rowley () gmail com>
Date: Mon, 26 Mar 2007 12:44:53 -0600

Another way to go is creating is using Snort inline.  Its pretty easy to sniff the connection traffic and find unique 
strings to create pretty fast rules.  I have done this for other online (AIM Express, GMail chat) chat services.




On Mon, 26 Mar 2007 08:53:20 -0400
"Devin Rambo" <drambo () vediorps com> wrote:

There are companies that make appliances that can do application layer
filtering and/or QoS. We're playing around with a Packeteer PacketShaper
here, and so far, we're pretty impressed with what it can do. Among the
layer 7 traffic it can regulate are all the common IM services, but there
are a whole bunch of other protocols that you can work with as well - VOIP,
file sharing, etc.

Devin

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Dixon, Wayne
Sent: Friday, March 23, 2007 5:39 PM
To: nawalmiftahi () gmail com; security-basics () securityfocus com
Subject: RE: how to block web messenger services

Short of a proxy to block the specific addresses, I myself, can't think of
anyway, since the web services connect to the back end server of the IM
services; and the only connection from your site to the web service site is
via HTTP, I can't think of any other way.

Wayne

 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of nawalmiftahi () gmail com
Sent: Tuesday, March 20, 2007 6:26 AM
To: security-basics () securityfocus com
Subject: how to block web messenger services


Hi all , 
   i am a security admin,yahoo messenger and other chat services are blocked
on our network, but we can access them thru web(ebuddy) , i wanted to know
how can we make sure that these chat services (yahoo messenger, icq, msn
messeger ) cannot be accessed through web as well , i mean how to block
them. thanks  


Attachment: signature.asc
Description:


Current thread: