Welcome to ISAserver.org

Block Google Talk

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> Block Google Talk

Page: [1]

Message

<< Older Topic Newer Topic >>

Block Google Talk - 27.Feb.2007 11:29:32 PM

naresh.aug21

Posts: 2
Joined: 27.Feb.2007
Status: offline

Dear All,

I am using ISA server 2004 in my organization. I have blocked "talk.google.com:5222", "talk.google.com:5223", and i have even blocked "talk.google.com:443".

Still users in my organization are able to access google talk. Please suggest me on this.

Regards
Naresh

Post #: 1

Featured Links*

RE: Block Google Talk - 27.Feb.2007 11:47:32 PM

naresh.aug21

Posts: 2
Joined: 27.Feb.2007
Status: offline

Can any one send me rule to block google talk. So that i can import into my isa 2004 server.

(in reply to naresh.aug21)

Post #: 2

RE: Block Google Talk - 6.Apr.2007 10:32:15 AM

lsjames

Posts: 8
Joined: 6.Apr.2007
Status: offline

Goole talk use jabber protocol , maybe you should block 5222 and 5223 port at any ip

_____________________________

No Signature

(in reply to naresh.aug21)

Post #: 3

RE: Block Google Talk - 16.Apr.2007 4:21:43 PM

cdavies

Posts: 11
Joined: 16.Apr.2007
Status: offline

To my understanding.

You have to find out what Google talks packet signature is (packet inspection) to be able to block it, you can't block by protocol or by port that could cause other problems with other apps, once you have the signature then you will be able to filter Google Talk.

Tom talks about blocking IM traffic based on packet signatures in his book

You can block any web enabled app based on it packet signature.

_____________________________

Chris Davies
A+ MCP

(in reply to naresh.aug21)

Post #: 4

RE: Block Google Talk - 17.Apr.2007 6:41:58 AM

Ashokk001

Posts: 232
Joined: 6.Oct.2005
Status: offline

Naresh,

Edit the host file on your isa server - located in c:\windows\system32\drivers\etc folder and add in the following line after the default localhost entry.

127.0.0.1 <tab> talk.google.com <enter>

You should find that google chat/talk is now blocked.

HTH,

Ash.

(in reply to naresh.aug21)

Post #: 5

RE: Block Google Talk - 17.Apr.2007 11:35:41 PM

cdavies

Posts: 11
Joined: 16.Apr.2007
Status: offline

Hi Ash

I just tried you method and it did not work, do you have an ISA server on your network and have to tested this method, maybe you left something out of the directions.

Thanks

_____________________________

Chris Davies
A+ MCP

(in reply to Ashokk001)

Post #: 6

RE: Block Google Talk - 18.Apr.2007 7:01:30 AM

Ashokk001

Posts: 232
Joined: 6.Oct.2005
Status: offline

Hi There,

I think i might have confused it with the google chat which users can now access it using their GMail account. We don't mind them accessing gmail but chat is blocked via the method i described. Sorry i don't know about google talk and i agree you would need to do a packet capture to see what kind of signature its using.

Ash.

(in reply to cdavies)

Post #: 7

RE: Block Google Talk - 18.Apr.2007 7:04:13 AM

Ashokk001

Posts: 232
Joined: 6.Oct.2005
Status: offline

Found some info here which may be useful:

http://seclists.org/firewall-wizards/2006/Jun/0030.html

Ash.

(in reply to cdavies)

Post #: 8

RE: Block Google Talk - 24.Apr.2007 10:17:22 AM

cdavies

Posts: 11
Joined: 16.Apr.2007
Status: offline

Thanks for the info

That is good stuff right there

_____________________________

Chris Davies
A+ MCP

(in reply to Ashokk001)

Post #: 9

RE: Block Google Talk - 17.Apr.2008 10:54:02 AM

jayakandan

Posts: 4
Joined: 16.Apr.2008
Status: offline

on the host file
127.0.0.1 chatenabled.mail.goggle.com
127.0.0.1 talk.ggogle.com

Its DOESN't Work on my ISA ,even on isa chat is enabled as well as network too.
the same host file chges made in cleint pc ,it block the chat
SO only on ISA it doesn't work
please HELP ME

_____________________________

Jay

(in reply to cdavies)

Post #: 10

RE: Block Google Talk - 17.Apr.2008 3:12:20 PM

ferrix

Posts: 355
Joined: 16.Mar.2005
Status: offline

Just a thought.. host file changes on ISA may require restarting the MS Firewall service before the changes are noticed.

(in reply to jayakandan)

Post #: 11

RE: Block Google Talk - 10.Jun.2008 2:58:06 AM

istanbulBt

Posts: 5
Joined: 10.Jun.2008
Status: offline

You must configure http options and add google talk signature there.

Please check the image, its an example configuration

If you block a connection port, Google talk and other IM programs trying connection on 80 and 8080 ports.

Sory for bad english and watermark. This web site is my project. We are support the Turkish users.

_____________________________

For Turkish Help please visit:
http://blog.istanbulbt.com

Sorry for my bad english...

(in reply to ferrix)

Post #: 12