Welcome to ISAserver.org

Blocking Windows Live Messenger

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Blocking Windows Live Messenger

Page: [1]

Message

<< Older Topic Newer Topic >>

Blocking Windows Live Messenger - 3.May2006 6:17:16 PM

Xignals

Posts: 31
Joined: 9.May2002
From: Alabama
Status: offline

I have been successful at blocking other versions of Messenger using signatures but the live version is working. Anyone know how to block it?

Post #: 1

Featured Links*

RE: Blocking Windows Live Messenger - 4.May2006 11:08:38 AM

engehab

Posts: 44
Joined: 11.Nov.2001
From: kuwait
Status: offline

the good way is to creat A URL set for Messenger Live sites and creat an access rule to block this URL set

_____________________________

Ehab Abu Al Khair
http://securityorg.blogspot.com/

(in reply to Xignals)

Post #: 2

RE: Blocking Windows Live Messenger - 15.May2006 2:23:39 PM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

I found this signature by analyzing the packets over my ISA box : User-Agent: Windows Live Messenger BETA 8.0.0689
I put it both on Signatures and Headers sections but my clients still can connect to Messenger service and they connect through the same rule on which I've defined those signatures.

Btw the exact signature that I found on the captured packets wasn't just the above statement. The full signature is like this :
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Windows Live Messenger BETA 8.0.0689)

Can it be the reason ? (Not entering the full string)

Edit : I tried the full string, too. No change of attitude.

< Message edited by denizyalcin -- 15.May2006 2:39:38 PM >

(in reply to engehab)

Post #: 3

RE: Blocking Windows Live Messenger - 15.May2006 2:37:43 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

have u tried Messenger BETA only ?

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to denizyalcin)

Post #: 4

RE: Blocking Windows Live Messenger - 15.May2006 2:52:51 PM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

Hi elmajdal,

Thanks for the fast response. Yes, i just tried putting that string (Messenger BETA), too. Still no difference. Btw when I log the clients who use Live Messenger, I see that some of their Messenger connections happen on SSL protocol. Those SSL connections do go to "omega.contacts.msn.com:443" and "loginnet.passport.com:443". Does the HTTP filtering work on SSL connections ?

(in reply to elmajdal)

Post #: 5

RE: Blocking Windows Live Messenger - 29.Jun.2006 9:41:14 PM

sirjig|

Posts: 2
Joined: 21.Jun.2006
Status: offline

hello mate: I have the same problem, I'm trying to block the windows live messenger, but not success, did you find another way to stop that service?

Gustavo

(in reply to denizyalcin)

Post #: 6

RE: Blocking Windows Live Messenger - 30.Jun.2006 4:29:42 PM

sirjig|

Posts: 2
Joined: 21.Jun.2006
Status: offline

I did This:

HTTP Header: User-Agent:

8.0.0787.00

and another for el MSN Beta

HTTP Header: User-Agent:
8.0.689.0

Gustavo. (MCSA, MCSE)

_____________________________

Gustavo Jimenez (MCSA, MCSE)

(in reply to sirjig|)

Post #: 7

RE: Blocking Windows Live Messenger - 7.Jul.2006 9:35:47 PM

masaraujo

Posts: 2
Joined: 7.Jul.2006
Status: offline

Hi, fellows.

I did This to block final version of Messenger live:

Request headers:
User-Agent:

8.0.792.0

It worked.

(in reply to Xignals)

Post #: 8

RE: Blocking Windows Live Messenger - 8.Jul.2006 9:44:36 AM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

hi guys,

always check this : http://forums.isaserver.org/HTTP_Signatures_-_NO_QUESTIONS_-_JUST_SIGNATURES_PLEASE/m_2002015478/tm.htm

it will include the latest signature of most applications.

HTH

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to masaraujo)

Post #: 9

RE: Blocking Windows Live Messenger - 15.Nov.2006 7:27:45 PM