Security Basics mailing list archives

Re: Instant Messaging hash values


From: "Gaddis, Jeremy L." <jeremy () linuxwiz net>
Date: Mon, 08 Aug 2005 20:23:22 -0500

Netops wrote:
    I think that this would be to hard to maintain, why not simple block
the type of traffic on the firewall or proxy server.

Ever tried to block IM traffic at the firewall?  Most of these Instant
Messaging applications are very port agile.  If there's an open port
through your firewall, these apps will find it.

It's easy to detect on an IDS or sniffer, but that's being reactive, not
proactive.

-j

-- 
Jeremy L. Gaddis     <jeremy () linuxwiz net>

"If it's not on fire, it's a software problem."


Current thread: