Block MSN Messenger in Education and Businesses
go straight to MSN
Messenger ports
How to block MSN Messenger on networks
You can block MSN Messenger and block MSN Web Messenger with TerminatorX v2
TerminatorX v2 can block MSN Messenger as well as other messengers and runs invisibly shutting down any programs chosen during setup (see picture).
TerminatorX v2 is selective - you can choose to allow MSN Messenger etc. to be used by some users (managers or teachers) but not others (employees or students).
You can find out who is trying to use programs or web sites that you have banned. TerminatorX Monitor shows 'Terminated' programs on a computer located anywhere on your network - for example a Technician's workstation'. The details are shown in 'real time' as the attempts are made. This screenshot shows a typical view:
Clicking a list entry provides additional details. TerminatorX Monitor can be set to save the details in a .CSV (comma separated values) file which can be opened and viewed in Excel.
| Find out about school district licenses Reduced prices available for 2 or more Site Licenses. |
What applications can TerminatorX v2 block?
Just about any. The common ones you can choose from the list provided with TerminatorX (see below). Others, including future applications, that become a nuisance can be easily added. You can select any combination (one or more) of the following individual applications to block:
Messenger applications and Web Messenger sites you can choose to block:
|
|
|
|
|
Chat and video communication applications you can choose to block:
|
|
|
|
|
File sharing applications you can choose to block:
|
|
|
Internet phones you can choose to block:
|
|
|
|
Keylogging and Stealth you can choose to block:
|
|
|
Casinos and Gambling you can choose to block:
|
|
|
|
Auctions you can choose to block:
|
|
|
|
Miscellaneous application and Windows components you can choose to block:
|
|
|
|
|
Pornography you can choose to block:
|
|
|
|
Warez you can choose to block:
|
|
|
|
Music players you can choose to block:
|
|
|
Web mail you can choose to block:
|
|
|
|
|
On-line games you can choose to block:
|
|
|
|
|
Games you can choose to block:
|
|
|
|
|
Sports News you can choose to block:
|
|
|
|
|
Downloads you can choose to block:
|
|
Plus any others hat you wish to add if you find that they are causing you a problem. Additions are easy to do for any programs or web sites not mentioned above - or that may be developed in the future.
Yes, you can ban any combination of the above applications. For example you could choose to block BitComet, MSN Messenger, ICQ, eBay, Casinos and iTunes.
TerminatorX can be used over Novell and NT server networks and also works with Windows workstations on a Unix network or Linux network. TerminatorX can be set up to work locally on portable computers and can be used on peer-to-peer network configurations that have no server.
Blocking MSN Messenger port numbers
|
If you block ports and
your users switch to web messengers (see below)... remember that TerminatorX can still block them |
According the Microsoft's website:
"When a session initiation protocol (SIP) solution is used, the data may be sent using TCP, UDP, or Secure Sockets Layer (SSL). SIP signaling can also use dynamic ports, which may require opening the entire range of ports on a firewall."
From the same source some of MSN Messenger ports are:
Audio and Video - dynamic ports were chosen for the audio-video (AV) stream.... using dynamically allocated UDP ports in the range of 5004 to 65535.
Application Sharing and Whiteboard - whiteboard (WB) data uses port 1503...
File Transfer - Both incoming and outgoing TCP connections use the range of ports from 6891 to 6900...
Remote Assistance - TCP port 3389 is used for the TCP connection for the Remote Assistance protocol.
Other sources
The MSN Messenger port numbers below are taken from (amongst others) PortForward.com and Experts Exchange discussions Q20968914 and Q20660861.
Unfortunately, trying to block MSN Messenger ports is not a sensible option because MSN Messenger can, and does, use a variety of ports including:
- TCP port 80 (the 'http' standard web port - see also Web Messenger blocking below)
- TCP port 1863
- TCP port 6901 (possibly)
- TCP ports 6891 to 6900.
- UDP on ports 1503, 3389, 5004-65535
You CAN block port 80 but then your workstations will not be able to access any web sites at all.
Also, users will just access MSN Web Messenger and other web messengers (see section below)
Further information is available from this forum:
"Ports 6891-6900 enable File send,
Port 6901 is for voice communications. Allows Voice, PC to Phone, Messages, and Full File transfer capabilities.
IN TCP 6891 - 6900IN TCP 1863
Blocking MSN Web Messenger's port (80) will stop Internet Explorer showing any web sites - good or bad - for all users.
Relax... let TerminatorX solve your problems for you.
IN UDP 1863
IN UDP 5190
IN UDP 6901
IN TCP 6901"
Other information from www.cyberphaze.net (not currently online) gave:
MSN Messenger
Service: remote: 1963 and 1863 local: 1542 and 1493.
Audio: local: 13803, 1556, 11771
File transfer: remote: 6891 local: 1544
Messenger Update: remote: 80 local: 1457
Sign-In: remote: 443 local: 1484, 2400
Remote Desktop: local/remote: 389, 522, 1503, 1720, and 1731.
Students and employees can switch to MSN Web Messenger
MSN Web Messenger, eMessenger, Yahoo Web Messenger and AIM Express are now available. The common feature of these is that they are accessed like any other web page using Internet Explorer or another browser. Stopping the browser port (80) means that you can't access web sites.
TerminatorX CAN block MSN Web Messenger and other web messengers as TerminatorX does not rely on blocking ports , but detects the use of the application or web site directly at the point of use.
