|
Home > Archive > IIS Server Security > January 2004 > msn messenger
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
|
| I'd like to block msn messenger from my iis5 server
config. Is this possible and how do I go about this?
Thanks.
| |
| Jonathan Maltz [MS-MVP] 2004-01-24, 2:00 am |
| IIS 5 is a web/FTP/NNTP server, MSN Messenger is a IM client. They have
nothing to do with each other...What are you trying to do?
--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. Any emails I have not authorized are deleted
before I see them.
"kr" <krogler@apslaw.com> wrote in message
news:0bbc01c3d5fc$b6ce15a0$a601280a@phx.gbl...quote:
> I'd like to block msn messenger from my iis5 server
> config. Is this possible and how do I go about this?
> Thanks.
| |
|
| IIS 5 is a conduit for all internet security policies
etc. which sits on the proxy server. I'd like to block
the passage of the messenger traffic at the server rather
than hunt down the individual clients. I thought my
question and goal were clear enough. If it is not the
place to turn off the service where might that be?quote:
>-----Original Message-----
>IIS 5 is a web/FTP/NNTP server, MSN Messenger is a IM
client. They havequote:
>nothing to do with each other...What are you trying to
do?quote:
>
>--
>--Jonathan Maltz [Microsoft MVP - Windows Server]
>http://www.visualwin.com - A Windows Server 2003 visual,
step-by-stepquote:
>tutorial site :-)
>http://vpc.visualwin.com - Does <insert OS name> work on
VPC 2004? Find outquote:
>here
>Only reply by newsgroup. Any emails I have not
authorized are deletedquote:
>before I see them.
>
>
>"kr" <krogler@apslaw.com> wrote in message
>news:0bbc01c3d5fc$b6ce15a0$a601280a@phx.gbl...
>
>
>.
>
| |
| Paul Lynch 2004-01-24, 2:00 am |
| On Thu, 8 Jan 2004 11:34:34 -0800,
<anonymous@discussions.microsoft.com> wrote:
quote:
>IIS 5 is a conduit for all internet security policies
>etc. which sits on the proxy server. I'd like to block
>the passage of the messenger traffic at the server rather
>than hunt down the individual clients. I thought my
>question and goal were clear enough. If it is not the
>place to turn off the service where might that be?
Your question was perfectly clear, as was Jonathon's perfectly correct
answer. You cannot place such restrictions using IIS.
The correct place to do this is within your proxy server's config
files. That's why its there. Which proxy are you using ?
If its ISA Server 2000 then try here :
http://www.isaserver.org
Regards,
Paul Lynch
MCSE
| |
| Christopher Haun 2004-01-24, 2:00 am |
|
Perhaps have the firewall block all unnecessary ports?
I think MSN IM uses port 1863 when establishing its connection.
ICQ IM uses 1027 or 4000 I think.
On another note, there is actually a way in Windows 2003's Active Directory
Security Policies to make it so XP clients cannot use MSN IM. But that
won't necessarily help us here. I'm not sure if Windows 2000's AD has
something similar.
[Standard disclaimer: These suggestions given without warranty, guarantee,
and/or the conveyance of any rights.]
| |
| Christopher Haun 2004-01-24, 2:00 am |
|
We used to have a KB article Q277812 "How to allow MSN Instant Messenger
Traffic Through ISA Server" but it is now defunct for some reason.
It confirms that port 1863 is key for MSN IM.
You might also want to track ports down for ICQ, AOL IM, Yahoo messenger,
Excite messenger, Odigo, Trillian, AT&T IM, Imici, Prodigy, PowWow, Jabber,
Kellster, Miranda, Tiscali and more.
| |
| jaimin 2004-01-27, 6:36 am |
| Hi
Yes you can block MSN and any other nuisance programs by using the
application blocker which is in a product called Browse Control. You
can download Browse Control from: www.browscontrol.com
Regards
Divyesh
"kr" <krogler@apslaw.com> wrote in message news:<0bbc01c3d5fc$b6ce15a0$a601280a@phx.gbl>...quote:
> I'd like to block msn messenger from my iis5 server
> config. Is this possible and how do I go about this?
> Thanks.
|
|
|
|
|