Welcome to ISAserver.org

blocking file transfers msn using HTTP filtering

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> blocking file transfers msn using HTTP filtering

Page: [1]

Message

<< Older Topic Newer Topic >>

blocking file transfers msn using HTTP filtering - 31.Aug.2005 7:53:00 AM

ThijsD

Posts: 21
Joined: 31.Aug.2005
Status: offline

Hello,

I'm trying to block msn file transfers through my ISA 2004. I already know this isn't possible by blocking ports 6891 through 6900, as the newer MSN clients don't use these ports for filetransfers.

I've already read serveral posts/articles on this site & other sites/newsgroups and now I've found a post on Tom Shinder's weblog (http://spaces.msn.com/members/drisa/Blog/cns!1p9yz6owxXl-uIlyqIZXkCrg!132.entry) with a possible solution.

Tom mentions to configure a HTTP Security Filter with a signature to block the following Host Header:
/x-msnmsgrp2p
However I've tried this but I can't get it working.

This is what I did:
-> Right-click on the rule -> Configure HTTP
-> On the signatures tab -> New signature
I've set these values:
* Search in -> Request headers
* HTTP headers -> Content-Type:
* Signature -> /x-msnmsgrp2p

What am I doing wrong?? I've alredy tried to enter "/x-msnmsgrp2p" as the value for HTTP headers but without any luck.
Tom, can you give us some additional info on how configuring the HTTP filter?

Many thanks in advance.
Best regards,
Thijs

Post #: 1

Featured Links*

RE: blocking file transfers msn using HTTP filtering - 1.Sep.2005 2:37:00 PM

psicorat

Posts: 41
Joined: 11.Jul.2005
From: Brazil
Status: offline

(in reply to ThijsD)

Post #: 2

RE: blocking file transfers msn using HTTP filtering - 4.Sep.2005 1:01:00 PM

Rickymag

Posts: 509
Joined: 26.Nov.2003
From: SA
Status: offline

Good day,

If you create a deny rule and then in the content not protocol you select MSN you will then be able to block the MSN client. This is the case by default you may have another rule that is allowing it through.

regards

RM

(in reply to ThijsD)

Post #: 3

RE: blocking file transfers msn using HTTP filtering - 5.Sep.2005 5:32:00 AM

ThijsD

Posts: 21
Joined: 31.Aug.2005
Status: offline

Hi RM,

Thanks for your reply.
I think your solution blocks all MSN communication, MSN file transfer included.
However I only need to block MSN file transfers, MSN text communication should still be allowed.

Do you have another suggestion I could try?

Best regards,
Thijs

(in reply to ThijsD)

Post #: 4

RE: blocking file transfers msn using HTTP filtering - 21.Sep.2005 6:35:00 PM

Jason Jones

Posts: 2256
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Need a third party tool for this level of control...

(in reply to ThijsD)

Post #: 5

RE: blocking file transfers msn using HTTP filtering - 23.Sep.2005 3:23:00 AM

ThijsD

Posts: 21
Joined: 31.Aug.2005
Status: offline

Tom Shinder posted this could be done by using the procedure described in my previous reply..

Tom, can you please give us some help with this??

Thank you.

Best regards,
ThijsD

(in reply to ThijsD)

Post #: 6