Block Yahoo! Instant Messenger communication with BorderManager 3.x
(Last modified: 11Sep2002)
This document (10061333) is provided subject to the disclaimer at the end of this document.
goal
Block Yahoo! Instant Messenger communication using BorderManager 3.x
fact
Novell NetWare 5
Novell NetWare 5.1
Novell BorderManager 3.5
Novell BorderManager 3.6
Yahoo! Messenger (3, 5, 0, 844)
MyYahoo Module (2, 0, 0, 352)
fix
This fix requires TCP/IP filtering support. Verify filter support is enabled by loading INETCFG from the server console, selecting 'Protocols', 'TCP/IP', and verify 'Filter Support' is set to 'Enabled'. NetWare supports Packet Forwarding Filters and Routing Information Filters. You can configure these filters through FILTCFG.NLM.
Once you have verified TCP/IP filtering support is enabled, load the Filter Configuration NetWare Loadable Module at the server console.
LOAD FILTCFG
Select 'Configure TCP/IP Filters' then 'Packet Forwarding Filters'. Verify the 'Status' is 'Enabled'.
If the 'Action' is set to 'Deny Packets in Filter List', press enter on 'Filters' containing the highlighted text '(List of Denied Packets)'. Displayed will be a list of the currently configured TCP/IP Forwarding Filters, in DENY mode. Press the INSERT key to define a new DENY filter for Yahoo! Instant Messaging. Modify the 'Dest Addr Type' field, selecting 'Network' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '204.71.201.0' in the 'Address' field. Enter '255.255.255.0' in the 'Subnetwork Mask' field, press the ESC key to keep changes. You may optionally enter a reference to Yahoo! Instant Messenger in the comment field. Press the ESC key, and choose 'Yes' to save the new filter.
If the 'Action' is set to 'Permit Packets in the Filter List', press enter on 'Exceptions' containing the highlighted text '(List of Packets Always Denied)'. Displayed will be a list of the currently configured EXCEPTIONS to the TCP/IP Forwarding Filters. Press the INSERT key to define a new EXCEPTION filter for Yahoo! Instant Messaging. Modify the 'Dest Addr Type' field, selecting 'Network' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '204.71.201.0' in the 'Address' field. Enter '255.255.255.0' in the 'Subnetwork Mask' field, press the ESC key to keep changes. You may optionally enter a reference to Yahoo! Instant Messenger in the comment field. Press the ESC key, and choose 'Yes' to save the new exception filter.
The Yahoo! instant messaging service appears to require communication with msg.edit.yahoo.com, as well as cs.yahoo.com (or csa.yahoo.com, csb.yahoo.com, csc.yahoo.com, etc.). The following list shows a majority of the servers Yahoo! Messenger communicates with. This information is provided only for your convenience and is subject to change at any time. Shown is the hostname, IP address and any alias hostnames or IP addresses. This assumes that the DNS contains information about the hostname or IP address in question. If you need more up-to-date and advanced information such as an MX record, please use NSLOOKUP. As you can see a majority of these IP Addresses are denied by our newly created filter.
[msg.edit.yahoo.com]
Translated Name: edit.messenger.yahoo.com
IP Address: 204.71.201.91
IP Address: 204.71.201.97
IP Address: 204.71.201.94
IP Address: 204.71.201.224
IP Address: 204.71.201.123
IP Address: 204.71.201.180
IP Address: 204.71.202.120
IP Address: 204.71.201.96
Alias: msg.edit.yahoo.com
[cs.yahoo.com]
Translated Name: cs.yahoo.com
IP Address: 204.71.202.58
IP Address: 204.71.200.54
IP Address: 216.115.105.57
IP Address: 204.71.200.57
IP Address: 216.115.106.48
IP Address: 204.71.200.55
IP Address: 216.115.105.214
IP Address: 204.71.202.119
IP Address: 204.71.201.100
IP Address: 216.136.131.93
IP Address: 204.71.202.59
[csb.yahoo.com]
Translated Name: csb.yahoo.com
IP Address: 204.71.201.100
IP Address: 204.71.202.58
[csc.yahoo.com]
Translated Name: csc.yahoo.com
IP Address: 204.71.200.55
IP Address: 204.71.200.57
IP Address: 204.71.200.54
[csa.yahoo.com]
Translated Name: cs.yahoo.com
IP Address: 204.71.202.59
IP Address: 216.115.106.48
IP Address: 204.71.200.57
IP Address: 216.115.105.214
IP Address: 204.71.202.119
IP Address: 216.136.131.93
IP Address: 204.71.200.54
IP Address: 216.115.105.57
IP Address: 204.71.202.58
IP Address: 204.71.201.100
IP Address: 204.71.200.55
Alias: csa.yahoo.com
Additional solutions are available to block AOL Instant Messenger, MSN Messenger, and ICQ..
document
| Document Title: | Block Yahoo! Instant Messenger communication with BorderManager 3.x |
| Document ID: | 10061333 |
| Solution ID: | NOVL43572 |
| Creation Date: | 26Mar2001 |
| Modified Date: | 11Sep2002 |
| Novell Product Class: | Novell BorderManager Services |
disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.