Re: [FW1] Yahoo Messenger Problems

["Darren Van Booven" <dvanbooven@FW1-NOSPAMnortelnetworks.com>]

Title: RE: [FW1] Yahoo Messenger Problems

By default the Yahoo client uses port 5050.  Users can get around this by specifying that the client uses port 80.  If you want to stop all users from using Yahoo, block everything using port 5050, as well as block any HTTP connection request to the Yahoo servers by blocking HTTP to the following destination IP nets (verified by ARIN):  

 

216.136.224.0 - 216.136.227.255

 

That should do it!

 

 

Darren Van Booven
Solution Architect
Nortel Networks
dvanbooven@nortelnetworks.com

 

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP 7.0

 
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=5eWm
-----END PGP PUBLIC KEY BLOCK-----

----- Original Message -----

From: Harvey, Jon

To: 'Aeon Hale' ; Mike Glassman - Admin ; fw-1-mailinglist

Sent: Friday, September 21, 2001 7:30 PM

Subject: RE: [FW1] Yahoo Messenger Problems

Aeon,

Thanks for the mail.
I think my users are running it thru port 80, the HTTP port though.
I sniffed all traffic and when my sniffed PC was running, it was only
running thru port 80, unless I was overlooking something when I filtered
other items out later?

Jon

-----Original Message-----
From: Aeon Hale [mailto:ahale@solutionworks.com]
Sent: Saturday, September 22, 2001 3:54 AM
To: Mike Glassman - Admin; Harvey, Jon;
fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] Yahoo Messenger Problems

Block port 5010, this is yahoo messenger port.  No need to block yahoo
sites, unless you dont want users to get to yahoo search page

-----Original Message-----
From: Mike Glassman - Admin [mailto:admin@iaa.gov.il]
Sent: Thursday, September 20, 2001 2:02 AM
To: 'Harvey, Jon'; fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] Yahoo Messenger Problems

Jon,

Kill access to mail.yahoo.com, www.yahoo.com and any other yahoo sites
you
can think of. That will do it.

Mike

> -----Original Message-----
> From: Harvey, Jon [SMTP:Jon.Harvey@nasdaq-japan.com]
> Sent: ã ñôèîáø 19 2001 3:49
> To:   fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject:      [FW1] Yahoo Messenger Problems
>
>
> To all,
>
> I need to know how to kill Yahoo Messenger in our office. We do not
want
> it
> running anymore and need to remove it via firewall means.
>
> Thanks
> Jon
> jon.harvey@nasdaq-japan.com
>
>
>
========================================================================
==
> ======
>      To unsubscribe from this mailing list, please see the
instructions at
>                http://www.checkpoint.com/services/mailing.html
>
========================================================================
==
> ======

========================================================================
========
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
========================================================================
========

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================