Blocking Yahoo

**FanBlade01** · May 17th, 2004, 10:22 AM

Hope someone can anwser me this question. I have a user that is using Yahoo Instant Messanger, and i do not what her to use that program. She is setup as a local admin so just removing the program will do no good because she can download and install it again. I have a Sonic Wall and I have blocked all port coming from her IP address for all chat, file sharing, and gaming site. From what i found Yahoo goes over port 80 and if i block port 80, no more internet and i do need her to have access to the web. Anyone have any suggestions?

Thanks

-R

**silencio** · May 17th, 2004, 10:28 AM

Does she know how to take ownership of files?

If not, remove permissions on the folder then replace them with deny for the everyone group.

This stops everyone and everything from accessing it until someone takes ownership of it again.

**ShadowWynd** · May 17th, 2004, 10:37 AM

You can also add this to the hosts file

messenger.yahoo.com will prevent them from downloading it directly from yahoo. The others block the login / auth. servers.

# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

**Gabriel** · May 17th, 2004, 11:21 AM

Originally Posted by ShadowWynd

You can also add this to the hosts file

messenger.yahoo.com will prevent them from downloading it directly from yahoo. The others block the login / auth. servers.

# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

Gr8 thinking!
Can you think about same method about Windows/MSN Messanger?

**ShadowWynd** · May 17th, 2004, 12:19 PM

Here is the host file I deploy in my PC labs - my users have pretty much admin rights (not my decision) but the vast majority of them don't know about the hosts file. P2P traffic is blocked by the network guys, but this prevents them from downloading some of the stuff in the first place.

Using the hosts file is not bulletproof, as they can download it elsewhere or even edit the host file - it is just a way of slowing them down. The beauty is when they try and download "Instant messenger" of choice, it acts like the page is down, so they forget it about it and try again later, same thing.

The idea here is to block both the download site and the servers that are used to authenticate and login. This does not affect people checking their email on hotmail or AOL-webmail, but it makes using an IM much more difficult.

Some of these, like Weatherbug, are harmless, but eat up a huge amount of bandwidth, especially when it is installed on many machines.

# -------------------------

127.0.0.1 localhost

# Block AOL IM
127.0.0.1 login.oscar.aol.com
127.0.0.1 aim.com
127.0.0.1 www.aim.com

# Block MSN Messenger
127.0.0.1 gateway.messenger.hotmail.com
127.0.0.1 login.gateway.hotmail.com

# Block ICQ
127.0.0.1 login.icq.com
127.0.0.1 http.proxy.icq.com
127.0.0.1 icq.mirabilis.com
127.0.0.1 http.proxy.icq.com
127.0.0.1 login.icq.com previously

# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

# Block Weatherbug
127.0.0.1 weatherbug.com
127.0.0.1 www.weatherbug.com

# Block P2P
127.0.0.1 kazaa.com
127.0.0.1 kazaalite.com
127.0.0.1 limewire.com
127.0.0.1 bearshare.com
127.0.0.1 edonkey2000.com
127.0.0.1 filedonkey.com
127.0.0.1 winmx.com
127.0.0.1 www.kazaa.com
127.0.0.1 www.kazaalite.com
127.0.0.1 www.limewire.com
127.0.0.1 www.bearshare.com
127.0.0.1 www.edonkey2000.com
127.0.0.1 www.filedonkey.com
127.0.0.1 www.winmx.com