NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] MSN and Yahoo messenger



almost forgot - more reading mat'l with a good link to ISS who wrote an excellent whitepaper on the issues
http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2868239,00.html
-
  Joe

>>> "Marsh, Richard" <[email protected]> 06/07/02 09:49AM >>>
AIM is even worse, a major hole was reported (the specifics escapes me at
the time) and AOL hasn't even acknowledged this confirmed problem.  We have
asked all staff members to uninstall it if it is running and are monitoring
the FW for anyone of this.

-----Original Message-----
From: Boules Tadrous [mailto:[email protected]]
Sent: Thursday, June 06, 2002 5:58 PM
To: [email protected]
Subject: Re: [FW-1] MSN and Yahoo messenger

Yahoo messenger standard port is 5050. I do not recommend doing this,
but here is the list of there IP address anyway
216.136.130.46
216.136.131.93
216.136.172.75
216.136.173.172
216.136.173.179
216.136.175.132
216.136.175.142
216.136.175.143
216.136.175.144
216.136.175.145
216.136.175.226
216.136.224.142
216.136.224.143
216.136.224.213
216.136.224.214
216.136.225.11
216.136.225.12
216.136.225.35
216.136.225.36
216.136.225.83
216.136.225.84
216.136.226.117
216.136.226.118
216.136.226.208
216.136.226.209
216.136.226.210
216.136.226.30
216.136.227.16
216.136.227.167
216.136.227.168
216.136.227.29
216.136.233.128
216.136.233.129
216.136.233.130
216.136.233.132
216.136.233.133
216.136.233.134
216.136.233.137
216.136.233.138

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]] On Behalf Of Joe
Pampel
Sent: Thursday, June 06, 2002 4:28 PM
To: [email protected]
Subject: Re: [FW-1] MSN and Yahoo messenger

You should not under any circumstance let these through IMHO. They
present a real threat to your network.
There have been several IM spread virus outbreaks already and just today
CERT issued a bulletin about
the Yahoo product. If people have to IM, either try and get a
professional-grade product with encryption and logging
in place or have them use the web-based AIM product which does not, as
far as I know, allow the remote launching of
apps and file downloads, etc.
I realize this doesn't answer your question, but it's IMHO very
important to understand the risks involved and make sure
that management does as well so the decision to let it through does not
come back to haunt you. My prediction FWIW
is that this is going to get worse before it gets better.

GD LK

Joe

>>> Ken Chan <[email protected]> 06/06/02 04:27AM >>>
Dear all,

Can someone tell me how to let MSN and Yahoo messenger pass through the
firewall.
How to add these two services.

Thanks.

Regards,
Ken

********************************************************
Ken Chan           Email: [email protected]
Tel: (852) 2608 6226     Fax: (852) 2608 6566
Automated Systems (HK) Ltd.
Software Division - System Services
********************************************************




**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.