ClearFoundation

Hello

I would like to to block "iMessage" on my home network (kids spending too much time messaging from iPods...)

In this article, it says that iMessage uses port 5223 TCP
support.apple.com/kb/ht4245

However, in my outgoing firewall config, it doesn't have this port open.
So the way I understand it, it shouldn't be working...?
Refer to the attached screenshot.

I don't know much about this side of things, if anyone can assist, I would appreciate it.

thanks,

Andrew

Well your problem is that iMessage uses ports other than just 5223

Ports

FaceTime iMessage

80 (TCP) √ √
443 (TCP) √ √
3478 through 3497 (UDP) √ -
5223 (TCP) √ √
16384 through 16387 (UDP) √ -
16393 through 16402 (UDP) √ -

Thats the info on the Apple website and as you can see the little program uses ports 80 and 443, since you got those ports open people will be able to send messages.

My advice would be to search for the iMessage Servers so you can block the traffic by destination and not ports.

o.k thanks Roderick

I took the Apple article to mean that it needs all those ports open (rather then using some or any of the ports)

Looking at the network traffic, it does not seem to use a specific host or domain, but uses various IP addresses in the 17.0.0.0/8 range- so it is difficult to isolate.

I'll take another look & see if I can narrow it down.


Andrew