Chan chan chan ... came the moment everyone was waiting, now dare to know the filter that blocks the msn messenger. The latest version also succumb to this blockade (windows live messenger 8.1)
First, create a filter for blocking specific, I mean I do not recommend it be added to an existing one is likely to lose the thread between such site blocked, and once lifted is adding it easier to go the other sites. Then we'll see some recommendations from blockades.
En la parte superior hay que destacar que debe estar activado el filtro de contenidos prohibidos y esta debe tener la palabra gateway.
En la parte superior, obviamente activada la opcion de filtro de sitios y sitios prohibidos y agregaremos las siguientes lineas:
messenger.hotmail.com:1863;
207.46.*.*/gateway/gateway.dll?Action=open&Server=SB&IP=*.*.*.*;
http://*.*.*.*/gateway/gateway.dll?Action=poll&SessionID=*.*;
Al final de las 3 lineas va un punto y coma ; no se porque no siempre sale en el blog Veamos que hace cada linea:
La primera apunta hacia the website of the messenger. As you know, IM is basically a mini-browser (and who has squid may notice that identifies so) then block access, the colon and the number indicates that we are closing the access to that port
The second line refers to the ip of the server hosting messenger services. gateway.dll is a file that occupies messenger to manage connections, as we see in the rest of the line, the last block secondary connections
third line, send basically the same block, but this time on the ID you want to occupy.
This is enough to block the messenger login without blocking access to hotmail. I have it and now more than that configuration comprobvado is the position within the company I work
does not work!
Before you start to curse my name, keep in mind the following points: 1 .-
Windows Live Messenger has a "thank you" to try by all means to connect to the internet, try gateways, routes, proxy settings, iexplorer, absolutely everything
2 .- Given the first point, the first thing is, customers must never be at the gateway router (for obvious reasons) or even as secondary dns, and then to detect response is set to take that exit. I put as a requirement and I assume all traffic will be diverted to the proxy, if any of these points are true then no guarantee that the lock is successful. 3 .- As
messenger takes the values \u200b\u200bof iexplorer to operate it would be best to block access to the configuration of iexplore. This will be very easy to do if you work with domain policy, or the last of the cases, took the local policy editor to modify and prevent access to it.
4 .- Restrictions. Prevent data from changing network connections. It is very easy to detect that you have fixed ip and change it if there is a high
5 .- Once activated the filter, this does not act immediately bluntly. You have to know to wait to take effect as praise and connections are made. Therefore would require a reboot of the client to cancel them and when he wanted to start a session and could not. Or if you do block scheduled as soon as the client is retired and off your computer, so the next day the blockade will be working.
restrictions on how to make more sites and programs, the issue is as simple as made an eye on your log of events. If you want to block is not, trillian for example, grab a client machine, connect it and see everything that happens out there, then it is easier to know what to do instead of putting stupid restrictions and it does not work.