Blocking Yahoo

[FanBlade01]

Hope someone can anwser me this question. I have a user that is using Yahoo Instant Messanger, and i do not what her to use that program. She is setup as a local admin so just removing the program will do no good because she can download and install it again. I have a Sonic Wall and I have blocked all port coming from her IP address for all chat, file sharing, and gaming site. From what i found Yahoo goes over port 80 and if i block port 80, no more internet and i do need her to have access to the web. Anyone have any suggestions?

Thanks

-R

[silencio]

Does she know how to take ownership of files?

If not, remove permissions on the folder then replace them with deny for the everyone group.

This stops everyone and everything from accessing it until someone takes ownership of it again.

[ShadowWynd]

You can also add this to the hosts file

messenger.yahoo.com will prevent them from downloading it directly from yahoo. The others block the login / auth. servers.


# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

[Gabriel]

You can also add this to the hosts file

messenger.yahoo.com will prevent them from downloading it directly from yahoo. The others block the login / auth. servers.


# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

Gr8 thinking!
Can you think about same method about Windows/MSN Messanger?

[ShadowWynd]

Here is the host file I deploy in my PC labs - my users have pretty much admin rights (not my decision) but the vast majority of them don't know about the hosts file. P2P traffic is blocked by the network guys, but this prevents them from downloading some of the stuff in the first place.

Using the hosts file is not bulletproof, as they can download it elsewhere or even edit the host file - it is just a way of slowing them down. The beauty is when they try and download "Instant messenger" of choice, it acts like the page is down, so they forget it about it and try again later, same thing.

The idea here is to block both the download site and the servers that are used to authenticate and login. This does not affect people checking their email on hotmail or AOL-webmail, but it makes using an IM much more difficult.

Some of these, like Weatherbug, are harmless, but eat up a huge amount of bandwidth, especially when it is installed on many machines.

# -------------------------

127.0.0.1 localhost

# Block AOL IM
127.0.0.1 login.oscar.aol.com
127.0.0.1 aim.com
127.0.0.1 www.aim.com

# Block MSN Messenger
127.0.0.1 gateway.messenger.hotmail.com
127.0.0.1 login.gateway.hotmail.com

# Block ICQ
127.0.0.1 login.icq.com
127.0.0.1 http.proxy.icq.com
127.0.0.1 icq.mirabilis.com
127.0.0.1 http.proxy.icq.com
127.0.0.1 login.icq.com previously

# Block Yahoo IM
127.0.0.1 msg.edit.yahoo.com
127.0.0.1 messenger.yahoo.com
127.0.0.1 http.pager.yahoo.com
127.0.0.1 scs.msg.yahoo.com
127.0.0.1 scsa.msg.yahoo.com
127.0.0.1 scsb.msg.yahoo.com
127.0.0.1 scsc.msg.yahoo.com
127.0.0.1 msg.sc5.yahoo.com
127.0.0.1 msg.yahoo.com

# Block Weatherbug
127.0.0.1 weatherbug.com
127.0.0.1 www.weatherbug.com

# Block P2P
127.0.0.1 kazaa.com
127.0.0.1 kazaalite.com
127.0.0.1 limewire.com
127.0.0.1 bearshare.com
127.0.0.1 edonkey2000.com
127.0.0.1 filedonkey.com
127.0.0.1 winmx.com
127.0.0.1 www.kazaa.com
127.0.0.1 www.kazaalite.com
127.0.0.1 www.limewire.com
127.0.0.1 www.bearshare.com
127.0.0.1 www.edonkey2000.com
127.0.0.1 www.filedonkey.com
127.0.0.1 www.winmx.com

[FanBlade01]

I should put the systax that you sent me into the host.sam file and rename it host.sys. Is that correct? If not you lost me.

[ShadowWynd]

Yep. You're lost.

Windows 95/98/Me
c:\windows\

Windows NT/2000
c:\WINNT\system32\drivers\etc

WinXP
c:\windows\system32\drivers\etc\

Look for a file called "hosts" - no extension. This is a text file, open it up in notepad, or make a new one in notepad. The entries I listed above are inserted into this file. You may need to reboot windows for it to work.

The host file acts as a small address book. When a program wants an address, such as "www.google.com", Windows will first check its host file. Usually, the host file only has a single entry "127.0.0.1 localhost", which just sets the IP number 127.0.0.1 to that individual PC. If windows can not find the address of www.google.com in the host file, it will then ask the ISP for the address. The ISP then looks up the address of the computer that is linked to the name (in this case "www.google.com" is 216.239.41.104, and then your PC has an idea how to start talking to Google.

making an entry in the hosts file of 127.0.0.1 tells the computer to try and find the files itself. if you have the line 127.0.0.1 www.aol.com in the hosts file, when someone tries to go to AOL, the computer will check the hosts file, try and contact itself (127.0.0.1), and will fail.

http://mvps.org/winhelp2002/hosts.htm

[FanBlade01]

Oh OK, i was is the right file "hosts" and i had the code in the right spot, but i was renaming the file hosts.sys after editing the file instead of naming it HOSTS. Works like a champ. Thanks for all the help

[cgonzo]

Cool, here are some more you may want to add:

www.f1organizer.com at IP address: 207:182:241:228
www.lycos.com at IP address: 209:202:216:27
www.incredifind.com at IP address: 12:129:205:105
www.180solutions.com at IP address: 216:74:27:20
IP address: 216:74:27:21
IP address: 216:74:27:22
IP address: 216:74:27:23
bis.180solutions.com at IP address: 216:74:27:24

I got this list from:http://www.androidworld.com/prod73.htm