Re: [FW-1] Blocking Messenger Applications

[Edwin Davidson <EDavidson@FW1-NOSPAMPRIMEINC.COM>]

I would suggest in your rules that block IM traffic, be it port or IP range, use DROP
and not REJECT.

I have YaHoo messenger, AIM, and MSN all installed on a test PC to make sure that
they continue to be blocked.

The other day, YaHoo started working again.  They had added some new IP addresses.

The Drop rule caused YaHoo to take a very long time to connect, however.  Some times
taking 15 minutes to get connected.

This kinda goes along the lines of QoSing the traffic, like a previous person
mentioned, making it way too slow to use.

In Floodgate, you can also QoS the download of the software.  If you know the
name of the download (like install_aim.exe) you can create a QoS rule and
limit it to 1 bit per second.   That would make it take forever to download.

Blocking IM's seems a never ending battle, with many fronts.



http://www.primeinc.com
**********************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email
in error please reply to the sender of the message.

The views expressed in this correspondence may not
reflect the views of Prime, Inc.

This footnote also confirms that this email message has
been scanned for the presence of computer viruses.
**********************************************************************

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================