Announcement

Collapse
No announcement yet.

Restrict MSN messenger contacts

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict MSN messenger contacts

    I been asked to investigate ways to restrict employees to using MSN messenger with co-worker contacts. Does anyone know of any good software to restrict who users contact? I thought Microsoft live communication server but it doesn’t seem to have the ability from my research so far.

    We use Active directory with windows XP workstations. Currently use ISA but will be moving to a hardware firewall in the near future.

    Thanks.

  • #2
    Re: Restrict MSN messenger contacts

    Hmmm, office communicator might give the solution to you.
    Also, ISA is an outstanding firewall. Why moving?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Restrict MSN messenger contacts

      Add a Rule into ISA that allows MSN to only connect to Internal users.
      1 1 was a racehorse.
      2 2 was 1 2.
      1 1 1 1 race 1 day,
      2 2 1 1 2

      Comment


      • #4
        Re: Restrict MSN messenger contacts

        Thanks for the quick feedback, Iíll take a look into those. Wouldn't the ISA rule prevent MSN from connecting to MSN servers to login? I assume we could carry to rule over to a juniper firewall.

        I donítí have any problems with ISA, the decision to replace it is coming from our corporate office.

        Comment


        • #5
          Re: Restrict MSN messenger contacts

          When creating a rule in ISA (eg by using the HTTP filter or blocking the IP addresses from the MSN servers) you can prevent connecting MSN to the MSN servers.
          However, you can't control which users are connecting to which contact.

          Therefor I was thinking about OCS (Office Communication Server) where you can keep the communication pure internal.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: Restrict MSN messenger contacts

            Isn't it possible to filter packets using the signature feature? The e-mail address of each user is transmitted in clear text.

            I'm trying to limit MSN only for internal use. A rule that accept MSN packets only with an specific domain (@yourcompany.com) would do the job.

            This is a wireshark capture with details about a msg sent through MSN.


            USR 15 [email protected] 1583850553.77219242.16063254
            USR 15 OK [email protected] Paul
            CAL 16 [email protected]
            CAL 16 RINGING 1583850553
            JOI [email protected] %2d%20John 1073741856

            MSG 14 U 96

            MIME-Version: 1.0
            Content-Type: text/x-msmsgscontrol
            TypingUser: [email protected]
            MSG 17 N 129
            MIME-Version: 1.0
            Content-Type: text/plain; charset=UTF-8
            X-MMS-IM-Format: FN=MS%20Shell%20Dlg; EF=; CO=0; CS=0; PF=0

            Hello. Testing.

            Comment

            Working...
            X