How to block ICQ?

[ckleow]

Hi!

I am trying to block access to icq from my office.
10.0.0.0 - the range of non-routable intranet IPs
205.188.0.0 - the range of icq IPs
Below is the setting in the router:

interface Serial0/0
ip access-group icq out
ip access-list extended icq
deny tcp any 205.188.0.0 0.0.255.255
deny udp any 205.188.0.0 0.0.255.255
deny tcp 10.0.0.0 0.255.255.255 205.188.0.0 0.0.255.255
deny udp 10.0.0.0 0.255.255.255 205.188.0.0 0.0.255.255
permit ip any any

BUT it does not work(as in the office could still use icq) and I really need to know the reason why fast! So someone please HELP ME!!! Thanks a lot in advance!!!

 

[BongWild]

I am not sure if this is your problem but I know that the instant messengers will also connect using the http protocols. Unless you block all access to your port 80 I don't know if you can prevent them from connecting.

 

[benzito]

ICQ also uses 64.12.0.0, /16. There's a program that tunnels ICQ over HTTP. To block access to this, you must block access to

http://www.icqproxy.com.

ICQ client-to-server communication is conducted over TCP port 5190.

 

[JohnJiang]

Benzito:
Can you tell us the exact config for blocking ICQ?

By blocking port numbers......it is not good idea.


Check point has function to block it...but did not work.