How to block MSN Messenger Service communication using BorderManager 3.x

(Last modified: 21Aug2002)

This document (10061335) is provided subject to the disclaimer at the end of this document.

goal

fact

Novell NetWare 5

Novell NetWare 5.1

Novell BorderManager 3.5

Novell BorderManager 3.6

MSN Messenger Service 3.x

Microsoft Network Instant Messenger Service 3.x

fix

This fix requires TCP/IP filtering support. Verify filter support is enabled by loading INETCFG from the server console, selecting 'Protocols', 'TCP/IP', and verify 'Filter Support' is set to 'Enabled'. NetWare supports Packet Forwarding Filters and Routing Information Filters. You can configure these filters through FILTCFG.NLM.

Once you have verified TCP/IP filtering support is enabled, load the Filter Configuration NetWare Loadable Module at the server console.

LOAD FILTCFG

Select 'Configure TCP/IP Filters' then 'Packet Forwarding Filters'. Verify the 'Status' is 'Enabled'.

If the 'Action' is set to 'Deny Packets in Filter List', press enter on 'Filters' containing the highlighted text '(List of Denied Packets)'. Displayed will be a list of the currently configured TCP/IP Forwarding Filters, in DENY mode. Press the INSERT key to define a new DENY filter for the MSN Instant Messenger Service. Modify the 'Dest Addr Type' field, selecting 'Network' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '64.4.13.0' in the 'Address' field. Enter '255.255.255.0' in the 'Subnetwork Mask' field, press the ESC key to keep changes. You may optionally enter a reference to MSN Instant Messenger Service in the comment field. Press the ESC key, and choose 'Yes' to save the new filter.

If the 'Action' is set to 'Permit Packets in the Filter List', press enter on 'Exceptions' containing the highlighted text '(List of Packets Always Denied)'. Displayed will be a list of the currently configured EXCEPTIONS to the TCP/IP Forwarding Filters. Press the INSERT key to define a new EXCEPTION filter for the MSN Instant Messenger Service. Modify the 'Dest Addr Type' field, selecting 'Network' instead of 'Any Address'. Select the 'Dest IP Address' field. Enter '64.4.13.0' in the 'Address' field. Enter '255.255.255.0' in the 'Subnetwork Mask' field, press the ESC key to keep changes. You may optionally enter a reference to MSN Instant Messenger Service in the comment field. Press the ESC key, and choose 'Yes' to save the new filter.

The MSN Instant Messenger Service appears to require communication with messenger.hotmail.com, as well as msgr-ns1.msgr.hotmail.com through msgr-ns50.msgr.hotmail.com (IP range 64.4.13.30 - 64.4.13.227).

[messenger.hotmail.com]
Translated Name: messenger.hotmail.com
IP Address: 64.4.13.17

Additionally, a DENY or EXCEPTION filter could be created to prevent communication with host 64.4.13.17

Additional solutions are available to block AOL Instant Messenger, ICQ, and Yahoo! Instant Messenger.

document

Document Title:	How to block MSN Messenger Service communication using BorderManager 3.x
Document ID:	10061335
Solution ID:	NOVL43574
Creation Date:	26Mar2001
Modified Date:	21Aug2002
Novell Product Class:	Novell BorderManager Services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.