|
|
 |  |
Re: how to block AOL IM using DNS spoofing?From: Men & Mice Support Date: Thursday, April 5, 2001
Time: 4:06:32 pm>I understand that AIM tries different ports via which to talk to
>login.oscar.aol.com. That is why I cannot simply add entries to my
>ACL in the access router.
You could probably block the destination IP addresses, though. It's
currently about 12 IP addresses.
>My thinking is, if I can deny access to that host altogether (by
>tricking it via a faulty DNS resolution) I can stop the conversation
>that way.
>
>If I enter DNS into Open Transport and then lock it so that users
>are unable to change it, I deny them from trying any other DNS than
>mine.
>
>This would work, wouldn't it?
Any user who's determined enough to get access to AIM will find a way
to do so. For example, if you lock the TCP/IP control panel, they can
simply throw away the TCP/IP prefs and restart to unlock it. They
could then restore such items as IP address and subnet mask, while
setting the DNS server box to whatever they want.
Another way would be to sign up for a Jabber account, then use
Jabber's AIM Transport to access their AIM account.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com We Make DNS Easy!
|

Return to Digital Point Solutions' Home Page |