[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] MSN and Yahoo messenger
almost forgot - more reading mat'l with a good link to ISS who wrote an excellent whitepaper on the issues http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2868239,00.html - Joe >>> "Marsh, Richard" <[email protected]> 06/07/02 09:49AM >>> AIM is even worse, a major hole was reported (the specifics escapes me at the time) and AOL hasn't even acknowledged this confirmed problem. We have asked all staff members to uninstall it if it is running and are monitoring the FW for anyone of this. -----Original Message----- From: Boules Tadrous [mailto:[email protected]] Sent: Thursday, June 06, 2002 5:58 PM To: [email protected] Subject: Re: [FW-1] MSN and Yahoo messenger Yahoo messenger standard port is 5050. I do not recommend doing this, but here is the list of there IP address anyway 216.136.130.46 216.136.131.93 216.136.172.75 216.136.173.172 216.136.173.179 216.136.175.132 216.136.175.142 216.136.175.143 216.136.175.144 216.136.175.145 216.136.175.226 216.136.224.142 216.136.224.143 216.136.224.213 216.136.224.214 216.136.225.11 216.136.225.12 216.136.225.35 216.136.225.36 216.136.225.83 216.136.225.84 216.136.226.117 216.136.226.118 216.136.226.208 216.136.226.209 216.136.226.210 216.136.226.30 216.136.227.16 216.136.227.167 216.136.227.168 216.136.227.29 216.136.233.128 216.136.233.129 216.136.233.130 216.136.233.132 216.136.233.133 216.136.233.134 216.136.233.137 216.136.233.138 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Joe Pampel Sent: Thursday, June 06, 2002 4:28 PM To: [email protected] Subject: Re: [FW-1] MSN and Yahoo messenger You should not under any circumstance let these through IMHO. They present a real threat to your network. There have been several IM spread virus outbreaks already and just today CERT issued a bulletin about the Yahoo product. If people have to IM, either try and get a professional-grade product with encryption and logging in place or have them use the web-based AIM product which does not, as far as I know, allow the remote launching of apps and file downloads, etc. I realize this doesn't answer your question, but it's IMHO very important to understand the risks involved and make sure that management does as well so the decision to let it through does not come back to haunt you. My prediction FWIW is that this is going to get worse before it gets better. GD LK Joe >>> Ken Chan <[email protected]> 06/06/02 04:27AM >>> Dear all, Can someone tell me how to let MSN and Yahoo messenger pass through the firewall. How to add these two services. Thanks. Regards, Ken ******************************************************** Ken Chan Email: [email protected] Tel: (852) 2608 6226 Fax: (852) 2608 6566 Automated Systems (HK) Ltd. Software Division - System Services ******************************************************** ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com ********************************************************************** ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|