Full proof way to block MSN?

Soldato
Joined
18 Oct 2002
Posts
18,296
Location
Brighton
Unfortunately I don't have ISA or anything like that installed and the router is just a DG834, i've tried adding all the msn servers to the block list but it still somehow manages to find a way through and connect.

Is there a specific way to deny access without purchasing extra kit?
 
Say what?

I have blocked the "msn ports" but that doesnt stop it tunneling via HTTP (80).

/edit i also don't really fancy doing it via GPO, just need to get it at router level.
 
Last edited:
I'm presuming this is to block a child accessing it. If so, why not just employ some good parenting? (by which I mean beating them until they can no longer guide the mouse to the msn icon)
 
login.live.com is a bad idea, as it cripples hotmail, and any other live based services.

Get signed upto opendns, use their DNS servers (Changing your routers dns servers to opendns should be sufficient), login, Settings, Content Filtering, "Customize" your current level, and check "Instant Messaging".
 
Last edited:
I'm presuming this is to block a child accessing it. If so, why not just employ some good parenting? (by which I mean beating them until they can no longer guide the mouse to the msn icon)

No, its to block aroudn 20 users at one of my client sites.

I've tried blocking a load of URL's but it still manages to find away, i'l give login.live.com a whirl, that'll stop hotmail access as well won't it?
 
Just tried it out, looks like its working!

Thanks very much, bloody good solution.

Really easy to circumvent mind. Just edit the hosts file on the local machine to the correct DNS entries or force the client machine to use a different dns server. You just need to make sure that people know messenger is against office regulations and could face a disciplinary. There is no such thing as a foolproof way if your trying hard to circumvent it.
 
Last edited:
there is a setting on our firewall that disables it after 3 minutes use
i will have a look for it in a sec
 
Really easy to circumvent mind. Just edit the hosts file on the local machine to the correct DNS entries or force the client machine to use a different dns server. You just need to make sure that people know messenger is against office regulations and could face a disciplinary. There is no such thing as a foolproof way if your trying hard to circumvent it.

Its actually in the office policy but I have been contacted by the MD and it's been brought to her attention that people are still using it but she wants to deal with it discreetly.

Personally I would rather flog her an SSG20 but I don't think she would like the price comparison on the netgear dg834 :D
 
Back
Top Bottom