Problem blocking Yahoo messenger using signature (Full Version)

All Forums >> [ISA 2006 Firewall] >> HTTP Filtering



Message


rezanet -> Problem blocking Yahoo messenger using signature (21.Jul.2008 3:35:46 AM)

Hi

I have a windows server 2003 with ISA 2006 Std installed and joined to my domain.
We have several IP subnets in our network and I added persistant route to ISA server for routing of each subnet.
Internal IP address of ISA server is 10.37.6.2 - 255.255.255.0 and external IP is 10.37.7.2 - 255.255.255.0 and network relation is Route (not NAT)
I tried to block yahoo messenger using Configure HTTP option on my last rule which permit selective protocol to external.
I tried these signatures:

      Search in: Request headers
      HTTP header: Host
      Signature: msg.yahoo.com

      Search in: Request headers
      HTTP header: User-Agent:
      Signature: ymsgr

All of my users are SecureNAT clients. no Firewall client or Web-proxy!

This setting did not works and everyone can connect to yahoo messenger!
I also tried to block TCP port 5050-5150 ... (all yahoo messenger ports which I found by monitoring packets)
It does not work too!
I also found that each time they try to sign in to Yahoo ,ISA server logs that they try to telnet to yahoo address! and I also block Telnet request to yahoo!

It does not work again [:(]

would you please help me with this BIG issue? [&o]

Thank you so much in advance.


Regards.




paulo.oliveira -> RE: Problem blocking Yahoo messenger using signature (21.Jul.2008 9:24:17 AM)

Hi,

use a network sniffer and check if the signatures that you´re blocking are the correcting ones.

Regards,
Paulo Oliveira.




rezanet -> RE: Problem blocking Yahoo messenger using signature (23.Jul.2008 1:28:23 AM)

Hi

Thank you for your attention,

I used Wireshark to monitor packets and I found this one :

Search in: Request headers
HTTP header: Host:
Pattern: messenger.yahoo.com

It does not work again [&o][:(]

PLEASE HELP !!!

Regards.




rezanet -> RE: Problem blocking Yahoo messenger using signature (26.Jul.2008 2:27:03 AM)

Any idea???
Any help???

I did all I found in articles and forums but it does not work [:(]
I should block yahoo messenger within this week please help me if you know any solution!



Regards.




rezanet -> RE: Problem blocking Yahoo messenger using signature (30.Aug.2008 2:21:44 AM)

Is there anybody out there????

Can you see me????

I'm asking HEEEELPPPPPP[:(]




royh -> RE: Problem blocking Yahoo messenger using signature (1.Sep.2008 8:34:44 AM)

Hi,

Check out the following: http://technet.microsoft.com/en-us/library/cc302520.aspx

Also, you can use group policies in your domain to prevent users from using the yahoo messenger application.

HTH,




rezanet -> RE: Problem blocking Yahoo messenger using signature (6.Sep.2008 6:15:20 AM)

Thank your for your reply royh,

But I tried all these and finally I believe that it's not possible to block yahoo messenger by signature!
so I found my answer here http://help.yahoo.com/l/in/yahoo/messenger/messenger8/messenger/messenger-02.html

I just blocked ports and access to listed servers.
I don't like this method but at least it just worked for me .

hope this help others ...

thank you




mshahbaz -> RE: Problem blocking Yahoo messenger using signature (3.Mar.2010 6:43:06 AM)

i blocked the yahoo messenger. and told you how to block Yahoo Messenger in the domain because i m on the domain.
create a protocol rule. and add tcp ports like 5050 5001 to  5010 80 21 23 25 and such like other that yahoo messenger attempt to connect the internet name it yahoo msg ports. now create a domain set and add a domain (" *.login.yahoo.com ") name it yahoo login page or any one that you could remember. now create a firewall rule name denny yahoo login. click next selected protocol click select yahoo msg port, add it and click next and now select internal user or any other that you need to block. click next select the yahoo login page from the domain sets. click next and select all users or select decided users and click next finish.


i done these steps and now its working for me.
the below method also work charm.


      Request headers
      HTTP header: Host
      Signature: msg.yahoo.com

      Search in: Request headers
      HTTP header: User-Agent:
      Signature: ymsgr

For any help you can contact me at m_shahbaz2005@hotmail.com
i shell try to help you back.




lsjames -> RE: Problem blocking Yahoo messenger using signature (24.Jul.2010 8:09:44 PM)

Please read this article http://forum.lanctrl.com/viewtopic.php?f=10&t=329
You must block domains
*.msg.yahoo.com
login.yahoo.com
*messenger.yahoo.com




roke1973 -> RE: Problem blocking Yahoo messenger using signature (9.Apr.2013 11:04:26 PM)

You can try to use the follow software to monitor yahoo messenger http://www.mysuperspy.com/yahoo-messenger.htm




Page: [1]