Re: Block messenger

From: Mario (mariogeorgiou_at_hotmail.com)
Date: 08/31/04


Date: Tue, 31 Aug 2004 09:02:18 +0100

if you router has some filtering functions you might be in a position to
identify the appropriate outgoing ports used for MSN messenger, and at the
router, you would be able to deny any access to the WAN if you set up a
rule.
If memory serves me correctly, MSN Messenger uses a range of ports and you
would have to block some of these.
As mentioned before, this would be a complete block for everyone - basically
all or nothing.
I think the ports used are ( cut and pasted from a website )

port
1838tcp MSN Messenger (gamevoice)

1863tcp/udp MSN messenger (primary)

5004udp MSN Messenger ports 5004-65535 ( too many to shut here -
used dynamically for audio and video )

5190udp MSN Messenger (incoming)

6891tcp MSN Messenger Filetransfer (incoming) - ports 6891 - 6900,
one port per file transfer

6901tcp/udp MSN Messenger Voice Telephony (incoming)

hope this helps

"Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com> wrote in
message news:OYzaZ4wjEHA.596@TK2MSFTNGP11.phx.gbl...
> Hi!
>
> Get ISA (upgrade to Premium) or at the very least a firewall that allows
> you to filter outbound connections. ISA is pretty much your only option if
> you want to control by user (per machine can be done).
>
> Even if you used GPOs for blocking MSN messenger (which don't work that
> well in the first place since somebody could simply rename the
> executable)... this doesn't work for Win9x machines.
>
> --
> Javier [SBS MVP]
>
> << SBS ROCKS !!! >>
>
> "MARCO" <anonymous@discussions.microsoft.com> wrote in message
> news:318401c48f0a$5cd9d080$a501280a@phx.gbl...
>> Hi Frank
>> No, I don't. I have SBS 2003 standard edition, wich does
>> not come with ISA.
>>
>>>-----Original Message-----
>>>Hi Marco
>>>
>>>Do you have ISA installed?
>>>
>>>Frank McCallister
>>>COMPUMAC
>>>"MARCO" <anonymous@discussions.microsoft.com> wrote in
>> message
>>>news:312001c48eea$c43585f0$a601280a@phx.gbl...
>>>> Helo, Does anybody know how to block and/or restrict MSN
>>>> MESSENGER SERVICE on WIN 98,2000 & XP machines connected
>>>> to a SBS 2003 SERVER? I'd like to restrict it or not
>>>> depending on the user. Is that possible?? Thanks a lot
>> for
>>>> yor help.
>>>>
>>>> PS. I don't have any aditional firewalls connected, my
>>>> Internet access is through a DSL Modem connected to the
>>>> server.
>>>
>>>
>>>.
>>>
>
>



Relevant Pages

  • Re: Messenger SP2 Voice Chat
    ... >> should switch to MSN Messenger 6.2, at least that works for me. ... >> Make sure UPnP is enabled in the router. ... You do not need to configure any ports. ...
    (microsoft.public.windowsxp.messenger)
  • Re: Denied UDP packet from LAN port 4654 to router 1900
    ... it's definitely the XP-style messenging UPnP stuff causing 1900 UDP ... > Probably MSN Messenger which I think enables or uses Universal Plug and Play ... >> thing on those ports and gave no further detail (no program shows on those ... >> Our domain is an NT4 domain. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Block messenger
    ... >if you router has some filtering functions you might be ... >identify the appropriate outgoing ports used for MSN ... >router, you would be able to deny any access to the WAN ... MSN Messenger uses a range ...
    (microsoft.public.windows.server.sbs)
  • RE: Best means to block MSN Messenger, AIM and other chat programs?
    ... You would need to also block TCP 5060-5061 and UDP 5060 if users are using XP. ... I have worked with MSN Messenger issues in the past. ... and Video Conferencing (also netmeeting). ... ports that span a great range of UDP ports. ...
    (Security-Basics)
  • RE: How to block MSN file transfer
    ... ISA server has those ports blocked by default and you had ... to open them if you wanted Messenger file transfers (only ... >MSN messenger uses specific ports for the file transfers, ...
    (microsoft.public.isaserver)