|
|
 |  |
Re: how to block AOL IM using DNS spoofing?From: Aaron Lynch Date: Thursday, April 5, 2001
Time: 4:10:19 pmMy suggestion to Kill students caught with non-standard software met with an
unusual degree of resistance at my school. Something about 'liability',
'parents', 'morality' yadda yadda yadda
On 04/05/2001 3:54 PM, The Defendant "Global Homes Webmaster"
<webmaster@globalhomes.com> Confessed:
> On 04/05/01 at 15:35, Richard James wrote:
>
>> I understand that AIM tries different ports via which to talk to
>> login.oscar.aol.com. That is why I cannot simply add entries to my
>> ACL in the access router.
>>
>> My thinking is, if I can deny access to that host altogether (by
>> tricking it via a faulty DNS resolution) I can stop the conversation
>> that way.
>>
>> If I enter DNS into Open Transport and then lock it so that users are
>> unable to change it, I deny them from trying any other DNS than mine.
>>
>> This would work, wouldn't it?
>
> Wouldn't it be easier to just remove AIM from the computers on your network?
> If it ain't there, the machines won't be going out looking for
> login.oscar.aol.com. Of course, that assumes that you have that degree of
> control over what your network users do on their computers, and I realize
> that's not necessarily a realistic assumption.
>
> Christopher Bort
|

Return to Digital Point Solutions' Home Page |