Security

Ask something
Discussion Locked

How to stop Instant Messaging

0 helpful
7 replies

by net designer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a LAN set up behind NAPT router and would like to stop any type of Instant Messaging sipping through from Internet. Any ideas what needs to be done?

7 replies

by madroxxx

IM has made itself very hard to stop by scanning for an open outbound port and establishing a conection there. This makes it about impossible to block through port filtering. You need to look at stopping it by preventing it being installed on machines or by a strict employee policy backed by HR/Management.

by vawns

You could also lock down the users' PC's with 3rd party software such as Cerberes to prevent them from being able to download IM software.

by tomsal

Just a little hint for anyone posting trying to be helpful by mentioned software products. You may want to consider post a link to the website of the software you mention, it makes your post that much more valuable.

by sabrodiesel2000

well you can stop it in some sense but not at all.

get a list of the instant messenger softwares and their sites, first block the access to that site and then block the PORT on ur firewall server. This might be the solution but what if there is anew software? you`ll have to block the PORT for that too...

And blocking the window NT`s internal messaging system can be blocked easily by a firewall!

by sabrodiesel2000

well you can stop it in some sense but not at all.

get a list of the instant messenger softwares and their sites, first block the access to that site and then block the PORT on ur firewall server. This might be the solution but what if there is anew software? you`ll have to block the PORT for that too...

And blocking the window NT`s internal messaging system can be blocked easily by a firewall!

by jschein

First of all you know the general chat programs out there... Aol, yahoo, msn, trilia, etc...

Each pc has a "HOSTS" file, locations different on each type of OS. All you have to do is edit that file with notepad, and put:

0.0.0.0 www.yahoo.com
0.0.0.0 www.aol.com
0.0.0.0 ....

Go into each website and find all links to all messenger material and ad 0.0.0.0.

The other solution which would be much faster due to the fact that you do not have to touch each "client" pc, would be to adjust your firewall settings. Normal users should not have any firewall privelages except web browsing if you want and on a case-by-case basis, open ports for all or assign static i.p.'s for specific users and give them more priveliges. Good luck as this takes time to decide in future planning of locking out the misc. things that goes on throughout a small to large business network.

This discussion is closed to new replies.