Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

AIM Express Port Block

Posted on 2006-11-21
2
1,718 Views
Last Modified: 2012-06-27
Hello,

I'm looking to block the access of AIM Express on our network. I'm aware of the port the AIM installed software uses, and have blocked it. When I run a network status in the command prompt (netstat /a) I'm seeing that one of the users is connecting to Aim Express on what appears to be port 6595. I just want to gain a second recommendation from everyone else that this is the correct port. Also, does anyone know if any other legitimate software uses this port? Thanks!
0
Comment
Question by:ChrisH3
2 Comments
 
LVL 11

Expert Comment

by:AdamBNYC
ID: 17990569
Blocking this port will not disable Aim Express. there is no port you can block to prevent AIM Express. Its works over 80 or 443, and is browser based. If you block 80 or 443, there will be websites you will not be able to hit as 80 and 443 are HTTP and HTTPS.
0
 
LVL 3

Accepted Solution

by:
KVR_Solutions earned 250 total points
ID: 17990896
Here is the easiest method to block Aim Express.

Set up a group policy that blocks an end users ability to change their network settings (especially DNS).

Make sure that the user is using your domain controller as their DNS server. Create a new zone called "aim.com" or whatever the site is that they visit and send it to a bogus address, such as 192.168.1.2.

If you want to have a little fun with it, you can try doing this (additionally):

Point the new Zone on your DNS server to a computer or web server that is running IIS. In IIS on that server, create a new website called "aim.com" or whatever that is. Create a page in the web sites directory called Default.asp and set up a response.redirect (http://pubs.logicalexpressions.com/pub0009/LPMArticle.asp?ID=214) to send the requests to monster.com.

As soon as I did that for all of the major sites like myspace, aim, and facebook.. we had quite a bit of water cooler talk at my company... and a lot more productivity.

Let me know if you need me to explain any of this stuff in more detail.

Ira @ KVR
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question