Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to block all but 1 user from MSN chat (msn live or whatever it's called now). My plan is to point the DNS to 127.0.0.1. However one user has to have it, I can edit the host file and put in the ip address to over ride the network DNS. However MSN uses round robin DNS and I don't want to have it go down when they change servers. Does someone have a better idea on how to do this? or how to do round robin DNS in a host file?

share|improve this question
    
What kind of firewall/proxy are you using? Is this something that can be done at that level? –  Coding Gorilla Sep 10 '10 at 16:49
    
I know that host file editing can be a quick fix but it's a slippery slope towards other things being held together with bandaid fixes. If you have the resources aka business class equipment you should never have to resort to such methods. –  PHLiGHT Sep 10 '10 at 23:36
add comment

1 Answer

up vote 2 down vote accepted

You could just leave DNS alone and block the IP's at the router.

Then use a DHCP reservation to give your one persion the same IP address each time, and allow that one to go through.

Way easier to manage (few changes in 1 place). Little easier to troubleshoot in the future, plus a savvy user might just update his/her hosts file to get to MSN.

Not sure if you mean msn communicator/chat or the www.msn.com... If it's the chat protocol, block the msn ports (do some searching) and you don't have to worry about IP's in the future...

share|improve this answer
    
blocking ports are not an option, MSN chat can go out over port 80 support.microsoft.com/kb/927847 but I will look at the firewall rules –  lineman60 Sep 10 '10 at 22:09
    
Sniffing the traffic during login then blocking the IP it connects to seems to work. –  lineman60 Sep 15 '10 at 19:58
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.