Block MSN?

[kingcu]

Hi guys,

Just wonder if there is a straight-forward way of blocking MSN messenger with Zentyal. I am running Zentyal 2.2.5. Also, can I block MSN for some of the PCs in our LAN, and leave the others open? Thanks.

[christian]

Do you mean that blocking access (at proxy level) to messenger.hotmail.com is not enough 

Microsoft support is not very useful as it assumes everything is Microsoft based  nothing really surprising 

However googling further, blocking *.messenger.hotmail.com & messenger.hotmail.com should be enough.
did you try already?

Regarding your second point: once method for block MSN is found, this one is obvious but will not work with transparent proxy obviously 

[Sam Graf]

However googling further, blocking *.messenger.hotmail.com & messenger.hotmail.com should be enough.

This may work to block access via the Web, but I don't think it will work to block "MSN messenger"--if that refers to access via a client application. For that we need to deny access to a port via the firewall, I think.

EDIT: Had to dig up a previous conversation: http://forum.zentyal.org/index.php/topic,7061.0.html

[christian]

Looking at Microsoft documentation, blocking HTTP should be already quite painful for MSN user  as almost all services rely on port 80 or 443 or use *.messenger.hotmail.com as written above.
Then you're right, some additional FW rules will help further.

[auerhaan]

You should think about blocking websites like ebuddy.com too. Otherwise users can connect to the messenger-network that way.

[christian]

I don't know this site but if you mean any web site providing web based chat service, then you are perfectly right.
This one any for sure some others and also any site acting as proxy/anonymizer 

Is there someone, company or whoever maintaining such list or is Squidguard efficient enough