so over the past few weeks @ my place of work we have been fighting with removing instant messaging in our workplace. MSN is a whole topic I dont wanna touch with a 90 foot pole because of the royal pain in the a$$ to block it. It seems that for every carefully crafted firewall rule someone always thinks outside the box & their programs still connect. that is a entirely differnet topic im not going to focus upon.
blocking gtalk is easy once you have figured out all the servers involved. note I just blocked the IP's as for me it is easier to just block the ip all together and if they open more ports it still will not work. here is a nice list for those who follow in my footsteps:
hostnames:
talk.google.com
talkgadget.google.com
ip's:
216.239.37.125
72.14.253.125
72.14.217.189
209.85.137.125
209.85.163.125
209.85.201.189
216.239.51.125
74.125.155.125
in a nice object group for a cisco pix:
object-group network gtalk
network-object host 216.239.37.125
network-object host 72.14.253.125
network-object host 72.14.217.189
network-object host 209.85.137.125
network-object host 209.85.163.125
network-object host 209.85.201.189
network-object host 216.239.51.125
network-object host 74.125.155.125
I hope this helps others with the same problems we had.


