Need to block Yahoo Messenger in Pix (515) firewall

[1665]

Hi, I need to block Yahoo Messenger, some users I have noticed use tools they've downloaded like ICQ and Yahoo Messenger and MSN Messenger to send mail and chat in rooms, we will be speaking to them, but I have had trouble blocking the yahoo messenger (

http://messenger.yahoo.com/).

The other too I have done, but I think the yahoo one has beaten me. I have created a deny rule and put so many IP addresses into a group. The firewall will block it, but if you select the option "Firewall with no Proxies" in yahoo messenger, the damn thing gets through. (http).

Hope you can help

A

 

[tbissett]

As of today, messenger.yahoo.com resolves to 216.109.116.177, 216.136.232.153, 66.163.172.51, and 216.109.116.176. So the commands would be the following. IMPORTANT: The access-list deny rule must be BEFORE any permits (particularly the permit 80) if you want the traffic denied to that host.

object-group network denied-hosts
description Hosts that are denied by firewall policy
network-object host 216.109.116.177
network-object host 216.136.232.153
network-object host 66.163.172.51
network-object host 216.109.116.176

access-list outbound deny ip any object-group denied-hosts