So a rule to deny all traffic to login.oscar.aol.com sounds like a good place
to start. Who cares what port they are using, also I see no reason they would
need to connect to this server other then chat so it should not result in any
loss of outside connections.