RE: OT: Firewall

["Paul Gordon" <paul_gordon@xxxxxxx>]

Thanks Ian, I'll have a play..

Although I was under the impression that the problem with NAT routers and
Netmeeting was caused because H323 used random port numbers, thus requiring
*ALL* ports to be open to ensure it worked?.. perhaps that's a mistaken
belief?

Paul G.



>From: "Ian  Willoughby" <ian@xxxxxxx>
>Reply-To: ukha_d@xxxxxxx
>To: <ukha_d@xxxxxxx>
>Subject: RE: [ukha_d] OT: Firewall
>Date: Tue, 22 Jan 2002 23:24:22 -0000
>
>
>I believe this is what Sir requires ;-)
>
>I think 1720 and 1731 are the key ones but some experimentation may be
>required.
>
>NetMeeting uses the following Internet Protocol (IP) ports:
>
>    Port      Purpose
>    -------------------------------------
>    389       Internet Locator Server (TCP)]
>    522       User Location Server (TCP)
>    1503      T.120 (TCP)
>    1720      H.323 call setup (TCP)
>    1731      Audio call control (TCP)
>    Dynamic   H.323 call control (TCP)
>    Dynamic   H.323 streaming [Realtime Transport Protocol (RTP) over
>(UDP)]
>
>
>
>
>
>
>-----Original Message-----
>From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
>Sent: 22 January 2002 20:54
>To: ukha_d@xxxxxxx
>Subject: RE: [ukha_d] OT: Firewall
>
>
>That would be cool - all of my internal PC's have static IP's anyway, -
I
>keep a DHCP service running just for portable devices, and visitors
etc..
>
>I can set up port forwarding no problem, and I have no problem
restricting
>myself to only 1 specific PC on the internal LAN using Netmeeting to
the
>outside world... (which I guess I would have to with a simple port
forward
>rule, and not a H.323 Proxy as you mentioned...)
>
>Hmm... perhaps a call to Draytek customer support with a feature
request is
>in order....
>
>If you could drop me the port numbers sometime, it would save me
looking
>them up myself... :-)
>
>Cheers.
>
>Paul G.
>
>
> >
> >
> >Hi ya Paul,
> >
> >The ASUS has built in functionality to enable a Netmeeting PROXY
on it,
> >this is quite cool as any of my PC's can use netmeeting (one at a
time to
> >external) but it deals with it. If you don't have a H.323 proxy
then your
> >only option is to give your Netmeeting PC a static IP address and
forward
> >the relevent ports (I can look these up if you want).
> >
> >Regards
> >Ian
> >
> >-----Original Message-----
> >From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
> >Sent: 22 January 2002 16:30
> >To: ukha_d@xxxxxxx
> >Subject: RE: [ukha_d] OT: Firewall
> >
> >
> >I also use a hardware firewall solution built in to my router
(Draytek
> >Vigor
> >2200), and this even has logging, but only to a Syslog server.
> >
> >So guess what one of my (many) things on my things to do list is?
-
> >correct,
> >find and obtain a freeware syslog daemon for windows!
> >
> >Ian, - what did you have to do (if anything) to make netmeeting
work
> >from behind it? - I'm pretty sure it's not working for me.. (not
the
> >audio or video connection anyway..)
> >
> >
> >Paul G.
> >
> >
> >
> > >From: "Ian  Willoughby" <ian@xxxxxxx>
> > >Reply-To: ukha_d@xxxxxxx
> > >To: <ukha_d@xxxxxxx>
> > >Subject: RE: [ukha_d] OT: Firewall
> > >Date: Tue, 22 Jan 2002 16:03:50 -0000
> > >
> > >I ran amoothwall for quite a while, nice solution but I am
now using
> > >an ASUS AAM6000EV ADSL router with built in NAT and port
forwarding.
> > >This gives me everything that Smoothwall did (except logging)
and
> > >lets me use netmeeting behind NAT straight out of the box.
This bit
> > >of kit cost me
> >£138
> > >including VAT from http://www.solwise.co.uk and it means I
now have a
> >spare
> > >PC (OK a backup HA PC).
> > >
> > >There are equivelent solutions for ISDN such as 3COM's
Lanmodem which
> > >offer similar features (I just happen to have one of these
going
> > >spare if you wan't to make me an offer), details at
> > >http://emea.3com.com/products/lanmodems/oc_isdn_st.html
> > >
> > >Regards
> > >Ian
> > >
> > >
> > >-----Original Message-----
> > >From: Steve B [mailto:steve@xxxxxxx]
> > >Sent: 22 January 2002 15:47
> > >To: ukha_d@xxxxxxx
> > >Subject: Re: [ukha_d] OT: Firewall
> > >
> > >
> > >if your a non linux person i would go for one of the firewall
distro
> > >of which there are many
> > >
> > >fli4l, smoothwall, freesco, etc
> > >
> > >Do a search
> > >
> > >
> > >----- Original Message -----
> > >From: steve.crick@xxxxxxx
> > >To: ukha_d@xxxxxxx
> > >Sent: Tuesday, January 22, 2002 2:54 PM
> > >Subject: [ukha_d] OT: Firewall
> > >
> > >What is the easiest, most efficient and cheapest way of
setting up a
> > >firewall for my home.
> > >
> > >I have an available PC with an ISDN TA and a Ethernet card.
> > >
> > >I would assume that the PC (firewall) would dial (and drop!)
on
> > >demand, so it could run headless without human intervention.
> > >
> > >I am not after a step-by-step 'how to do' guide; simply some
> > >pointers/recommendations for right software to use.
> > >
> > >Thanks - Steve
> > >
> > >
> >
>********************************************************************
> > >This email and any attachments are confidential to the
intended
> > >recipient and may also be privileged. If you are not the
intended
> > >recipient please delete it from your system and notify the
sender.
> > >You should not copy it or use it for any purpose nor disclose
or
> > >distribute its contents to any other person.
> >
>********************************************************************
> > >
> > >
> > >For more information: http://www.automatedhome.co.uk
> > >Post message: ukha_d@xxxxxxx
> > >Subscribe:  ukha_d-subscribe@xxxxxxx
> > >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >List owner:  ukha_d-owner@xxxxxxx
> > >
> > >Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > ><http://docs.yahoo.com/info/terms/>
Service.
> > >
> > >
> > >
> > >Yahoo! Groups Sponsor
> > >
> > >ADVERTISEMENT
> > >
> > ><http://rd.yahoo.com/M=215002.1818248.3328688.1261774/D=egroupweb/S=1
> > >705041992:HM/A=847665/R=0/*http://ads.x10.com/?bHlhaG9vbW9uc3RlcjcuZG
> >
>F0=1011714750%3eM=215002.1818248.3328688.1261774/D=egroupweb/S=170504
> > >1992:HM/A=847665/R=1>
> > >
> > ><http://us.adserver.yahoo.com/l?M=215002.1818248.3328688.1261774/D=eg
> > >roupmail/S=1705041992:HM/A=847665/rand=782555182>
> > >
> > >For more information: http://www.automatedhome.co.uk
> > >Post message: ukha_d@xxxxxxx
> > >Subscribe:  ukha_d-subscribe@xxxxxxx
> > >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >List owner:  ukha_d-owner@xxxxxxx
> > >
> > >Your use of Yahoo! Groups is subject to the Yahoo! Terms of
> > ><http://docs.yahoo.com/info/terms/>
Service.
> > >
> > >
> >
> >
> >
> >
> >_________________________________________________________________
> >Get your FREE download of MSN Explorer at
> >http://explorer.msn.com/intl.asp.
> >
> >
> >
> >For more information: http://www.automatedhome.co.uk
> >Post message: ukha_d@xxxxxxx
> >Subscribe:  ukha_d-subscribe@xxxxxxx
> >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> >List owner:  ukha_d-owner@xxxxxxx
> >
> >Your use of Yahoo! Groups is subject to
> >http://docs.yahoo.com/info/terms/
> >
> >
>
>
>
>
>_________________________________________________________________
>MSN Photos is the easiest way to share and print your photos:
>http://photos.msn.com/support/worldwide.aspx
>
>
>------------------------ Yahoo! Groups Sponsor
---------------------~-->
>Get your FREE credit report with a FREE CreditCheck Monitoring Service
>trial http://us.click.yahoo.com/ACHqaB/bQ8CAA/ySSFAA/IBOolB/TM
>---------------------------------------------------------------------~->
>
>For more information: http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/