Welcome to ISAserver.org

Problem blocking Yahoo messenger using signature

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> Problem blocking Yahoo messenger using signature

Page: [1]

Message

<< Older Topic Newer Topic >>

Problem blocking Yahoo messenger using signature - 21.Jul.2008 3:35:46 AM

rezanet

Posts: 16
Joined: 29.Nov.2006
Status: offline

Hi

I have a windows server 2003 with ISA 2006 Std installed and joined to my domain.
We have several IP subnets in our network and I added persistant route to ISA server for routing of each subnet.
Internal IP address of ISA server is 10.37.6.2 - 255.255.255.0 and external IP is 10.37.7.2 - 255.255.255.0 and network relation is Route (not NAT)
I tried to block yahoo messenger using Configure HTTP option on my last rule which permit selective protocol to external.
I tried these signatures:

      Search in: Request headers
      HTTP header: Host
      Signature: msg.yahoo.com

      Search in: Request headers
      HTTP header: User-Agent:
      Signature: ymsgr

All of my users are SecureNAT clients. no Firewall client or Web-proxy!

This setting did not works and everyone can connect to yahoo messenger!
I also tried to block TCP port 5050-5150 ... (all yahoo messenger ports which I found by monitoring packets)
It does not work too!
I also found that each time they try to sign in to Yahoo ,ISA server logs that they try to telnet to yahoo address! and I also block Telnet request to yahoo!

It does not work again

would you please help me with this BIG issue?

Thank you so much in advance.

Regards.

Post #: 1

Featured Links*

RE: Problem blocking Yahoo messenger using signature - 21.Jul.2008 9:24:17 AM

paulo.oliveira

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

use a network sniffer and check if the signatures that you�re blocking are the correcting ones.

Regards,
Paulo Oliveira.

(in reply to rezanet)

Post #: 2

RE: Problem blocking Yahoo messenger using signature - 23.Jul.2008 1:28:23 AM

rezanet

Posts: 16
Joined: 29.Nov.2006
Status: offline

Hi

Thank you for your attention,

I used Wireshark to monitor packets and I found this one :

Search in: Request headers
HTTP header: Host:
Pattern: messenger.yahoo.com

It does not work again

PLEASE HELP !!!

Regards.

(in reply to paulo.oliveira)

Post #: 3

RE: Problem blocking Yahoo messenger using signature - 26.Jul.2008 2:27:03 AM

rezanet

Posts: 16
Joined: 29.Nov.2006
Status: offline

Any idea???
Any help???

I did all I found in articles and forums but it does not work

I should block yahoo messenger within this week please help me if you know any solution!

Regards.

(in reply to rezanet)

Post #: 4

RE: Problem blocking Yahoo messenger using signature - 30.Aug.2008 2:21:44 AM

rezanet

Posts: 16
Joined: 29.Nov.2006
Status: offline

Is there anybody out there????

Can you see me????

I'm asking HEEEELPPPPPP

(in reply to rezanet)

Post #: 5

RE: Problem blocking Yahoo messenger using signature - 1.Sep.2008 8:34:44 AM

royh

Posts: 318
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Hi,

Check out the following: http://technet.microsoft.com/en-us/library/cc302520.aspx

Also, you can use group policies in your domain to prevent users from using the yahoo messenger application.

HTH,

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH
www.foxminds.com

(in reply to rezanet)

Post #: 6

RE: Problem blocking Yahoo messenger using signature - 6.Sep.2008 6:15:20 AM

rezanet

Posts: 16
Joined: 29.Nov.2006
Status: offline

Thank your for your reply royh,

But I tried all these and finally I believe that it's not possible to block yahoo messenger by signature!
so I found my answer here http://help.yahoo.com/l/in/yahoo/messenger/messenger8/messenger/messenger-02.html

I just blocked ports and access to listed servers.
I don't like this method but at least it just worked for me .

hope this help others ...

thank you

(in reply to royh)

Post #: 7

RE: Problem blocking Yahoo messenger using signature - 3.Mar.2010 6:43:06 AM

mshahbaz

Posts: 2
Joined: 6.Aug.2006
Status: offline

i blocked the yahoo messenger. and told you how to block Yahoo Messenger in the domain because i m on the domain.
create a protocol rule. and add tcp ports like 5050 5001 to 5010 80 21 23 25 and such like other that yahoo messenger attempt to connect the internet name it yahoo msg ports. now create a domain set and add a domain (" *.login.yahoo.com ") name it yahoo login page or any one that you could remember. now create a firewall rule name denny yahoo login. click next selected protocol click select yahoo msg port, add it and click next and now select internal user or any other that you need to block. click next select the yahoo login page from the domain sets. click next and select all users or select decided users and click next finish.

i done these steps and now its working for me.
the below method also work charm.

      Request headers
      HTTP header: Host
      Signature: msg.yahoo.com

      Search in: Request headers
      HTTP header: User-Agent:
      Signature: ymsgr

For any help you can contact me at m_shahbaz2005@hotmail.com
i shell try to help you back.

(in reply to rezanet)

Post #: 8

RE: Problem blocking Yahoo messenger using signature - 24.Jul.2010 8:09:44 PM

lsjames

Posts: 30
Joined: 6.Apr.2007
Status: offline

Please read this article http://forum.lanctrl.com/viewtopic.php?f=10&t=329
You must block domains
*.msg.yahoo.com
login.yahoo.com
*messenger.yahoo.com

(in reply to mshahbaz)

Post #: 9

RE: Problem blocking Yahoo messenger using signature - 9.Apr.2013 11:04:26 PM