Welcome to ISAserver.org

Stopping Instant messangers

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> Stopping Instant messangers

Page: [1]

Message

<< Older Topic Newer Topic >>

Stopping Instant messangers - 6.Sep.2002 4:34:00 PM

helpmjsc

Posts: 23
Joined: 2.Apr.2002
From: Grand Rapids
Status: offline

I posted this about two months ago and I got no replys from it.

I'm trying to stop AOL instant messanger. I followed Tom S article "How to block .........".
Configured everything exactly, I even created a sit and content rule (SOCKS 4 is disabled) but to know aval AOLIM still gets through. Can anyone help stop this IM?
Thanks
If you need more info. on what I did please let me know and I would be happy to go over it with ya. Thanks alot.

Post #: 1

Featured Links*

RE: Stopping Instant messangers - 9.Sep.2002 6:57:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Help,

Did you add the mspclnt.ini entry to block the application? The clients will have to be running the Firewall client for this to work. You might also want to check up on the AOL entries that are getting through (in the Web Proxy log) and add those domains to the blocked list.

HTH<
Tom

(in reply to helpmjsc)

Post #: 2

RE: Stopping Instant messangers - 10.Sep.2002 5:53:00 PM

helpmjsc

Posts: 23
Joined: 2.Apr.2002
From: Grand Rapids
Status: offline

Thanks for responding Tom.
I did check the mspclnt.ini file and it is blocked on the client workstation and the server.
"disable=1"
"[AIM]"

I also checked the log. How do I determine what the domain is? In the log file I searched for AIM and I found aimtoday.aol.com, http://art.digitalcity.com/aimtoday_newmain\love_off and aim-charts.pf.aol.com.... are those the domains you are talking about?

Thanks

[ September 12, 2002, 08:56 PM: Message edited by: helpmjsc ]

(in reply to helpmjsc)

Post #: 3

RE: Stopping Instant messangers - 12.Sep.2002 8:57:00 PM

helpmjsc

Posts: 23
Joined: 2.Apr.2002
From: Grand Rapids
Status: offline

Anyone?

(in reply to helpmjsc)

Post #: 4

RE: Stopping Instant messangers - 12.Sep.2002 10:16:00 PM

lemonwater925

Posts: 417
Joined: 22.Mar.2001
From: North of the 49th
Status: offline

Brute force method:

Install AIM on your desktop
Run taskmgr note all the apps running
Start up AIM
Run taskmgr note the new app running
Do some chatting
Check FW logs and Web access logs for all activity from your IP.

From the FW logs will determine name of app.
From the Web Access logs will check the sites (there may be tonnes of them)

Create re-direct rule for the AOL site that is in question to send them to this site http://151.200.3.8/~vze29k6v/you.html make sure that their speakers are on.

HTH

[ September 12, 2002, 10:25 PM: Message edited by: lemonwater925 ]

(in reply to helpmjsc)

Post #: 5

RE: Stopping Instant messangers - 13.Sep.2002 7:48:00 AM