Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Security Basics: Re: how to block ALL AIM traffic ?

Re: how to block ALL AIM traffic ?

From: Netops <michael_at_bluesuperman.com>
Date: Mon, 02 May 2005 22:23:50 -0600

Decent application level filters can block proxies such as socks
connections and HTTP tunneling software. The hardest ones are the ones
the use the "CONNECT" method which most SSL sites use in order to
function through web proxies.

That can be blocked by only allowing the CONNECT method on port 443 and
restricting SSL connections to required servers such as banks, airlines
or other approved sites by managers.

Michael

Jesus wrote:
> On Thu, 28 Apr 2005, david kuhlman wrote:
>
>
>>Why don't you just block connections to oscar.login.aol.com?
>>
>>That works for us.
>>
>>David Kuhlman
>
>
> Considering anyone can bypass blocks with a proxy, little you can do
> without digging into packet specifics, to block AIM traffic.
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> "The most tyrannical of governments are those which make
> crimes of opinions, for everyone has an inalienable
> right to his thoughts." -- Benedict Spinoza
>
>
> //sil
>
> http://www.kungfunix.net http://www.politrix.org
> http://www.infiltrated.net http://bush.shafted.us
>
Received on May 03 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos