Block Msn

[myaflb]

Hi everyone, i want to block msn that connect using nat. How can i make this possible?
I dont use wingate client utility.
Thanks

[logan]

MSN Messenger uses TCP port 1863 primarily, or TCP port 80 (HTTP) alternatively if port 1863 does not work. So to block MSN Messenger, you will need to do two things.


A. Block TCP port 1863 in the firewall

- GateKeeper -> System -> Extended Networking -> Port Security
- Click Add
- Enter a description for the port
- Deselect 'Internet computers to the WinGate PC'
- Select 'Local computers to the internet'
- Enter the port range 1863 to 1863
- Select 'Drop Packet'
- Click OK
- Click OK


B. Block URL's containing gateway.dll in the WWW Proxy

This depends on how your WWW Proxy Server is currently configured, so I can't give you step by step instructions for this. What you need to block is any HTTP URLs containing gateway.dll. This is the HTTP resource that MSN Messenger needs to access to establish a connection using HTTP.

[myaflb]

Ok, but i want to block msn using policys in extended networking. For a specific group.

[logan]

That's fine, you can leave port 1863 open in port security and use policy to block it instead.

[myaflb]

How? I make a filter, on a group, on extended networking, blocking server port 1863, but i still have connection to msn servers.

[ChrisH]

Do you have the Everyone group in Extended Networking policies as well as this specific group? If you do, this may be why this specific group still has access - as they are part of the Everyone group by default. One way to solve this is to add a filter in the Everyone group something like:

Filter 1
Criterion1 NOT User is a member of NO_MSN_group

Let us know if this helps.