Question : Capture command on CISCO PIX firewall (how to find out what MSN messenger servers are being connected to)

Well I read on there forums that you can view the log on the firewall to find out what servers MSN Messenger connects to. I need to block access to these servers hence what command do I use to find this out.

I suspect I have to use the "capture" command but don't have much knowledge about this.

I can post the config file of the PIX 515e firewall if needed :)

CD

Answer : Capture command on CISCO PIX firewall (how to find out what MSN messenger servers are being connected to)

the servers range i tested are baym-cs###.msgr.hotmail.com [207.46.106.###], where ### is from 1 to 200, every host in the range has its domain name. you range from 207.46.104.xxx to 207.46.108.xxx is much wider than mine. so i suggest:

1. only block those addresses that appeared in the past, dont block the whole range.

or

2. block the whole range, just for test only, check if such blocking has effects to other microsoft applications.

hope it helps,
bbao