RE: OT: Firewall

["Ian Willoughby" <ian@xxxxxxx>]

=20
Yeah, it does, which is why you have to initiate the call, I think the
bulk=
of the negotiation goes over 1720, to ask the over end which ethemeral por=
ts are listening. Obviously if two people are behind a firewall which does
=
not Proxy things are not going to work.

Regards
Ian


-----Original Message-----
From: Paul Gordon [mailto:paul_gordon@xxxxxxx]=20
Sent: 22 January 2002 23:38
To: ukha_d@xxxxxxx
Subject: RE: [ukha_d] OT: Firewall


Thanks Ian, I'll have a play..

Although I was under the impression that the problem with NAT routers
and=20
Netmeeting was caused because H323 used random port numbers, thus
requiring=
=20
*ALL* ports to be open to ensure it worked?.. perhaps that's a mistaken=20
belief?

Paul G.



>From: "Ian  Willoughby" <ian@xxxxxxx>
>Reply-To: ukha_d@xxxxxxx
>To: <ukha_d@xxxxxxx>
>Subject: RE: [ukha_d] OT: Firewall
>Date: Tue, 22 Jan 2002 23:24:22 -0000
>
>
>I believe this is what Sir requires ;-)
>
>I think 1720 and 1731 are the key ones but some experimentation may be
>required.
>
>NetMeeting uses the following Internet Protocol (IP) ports:
>
>    Port      Purpose
>    -------------------------------------
>    389       Internet Locator Server (TCP)]
>    522       User Location Server (TCP)
>    1503      T.120 (TCP)
>    1720      H.323 call setup (TCP)
>    1731      Audio call control (TCP)
>    Dynamic   H.323 call control (TCP)
>    Dynamic   H.323 streaming [Realtime Transport Protocol (RTP)
over=20
>(UDP)]
>
>
>
>
>
>
>-----Original Message-----
>From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
>Sent: 22 January 2002 20:54
>To: ukha_d@xxxxxxx
>Subject: RE: [ukha_d] OT: Firewall
>
>
>That would be cool - all of my internal PC's have static IP's anyway,
-=20
>I keep a DHCP service running just for portable devices, and
visitors=20
>etc..
>
>I can set up port forwarding no problem, and I have no problem=20
>restricting myself to only 1 specific PC on the internal LAN using=20
>Netmeeting to the outside world... (which I guess I would have to
with=20
>a simple port forward rule, and not a H.323 Proxy as you mentioned...)
>
>Hmm... perhaps a call to Draytek customer support with a feature=20
>request is in order....
>
>If you could drop me the port numbers sometime, it would save me=20
>looking them up myself... :-)
>
>Cheers.
>
>Paul G.
>
>
> >
> >
> >Hi ya Paul,
> >
> >The ASUS has built in functionality to enable a Netmeeting PROXY
on=20
> >it, this is quite cool as any of my PC's can use netmeeting (one
at a=20
> >time to
> >external) but it deals with it. If you don't have a H.323 proxy
then you=
r
> >only option is to give your Netmeeting PC a static IP address and
forwar=
d
> >the relevent ports (I can look these up if you want).
> >
> >Regards
> >Ian
> >
> >-----Original Message-----
> >From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
> >Sent: 22 January 2002 16:30
> >To: ukha_d@xxxxxxx
> >Subject: RE: [ukha_d] OT: Firewall
> >
> >
> >I also use a hardware firewall solution built in to my router=20
> >(Draytek Vigor 2200), and this even has logging, but only to a
Syslog=20
> >server.
> >
> >So guess what one of my (many) things on my things to do list is?
-=20
> >correct, find and obtain a freeware syslog daemon for windows!
> >
> >Ian, - what did you have to do (if anything) to make netmeeting
work=20
> >from behind it? - I'm pretty sure it's not working for me.. (not
the=20
> >audio or video connection anyway..)
> >
> >
> >Paul G.
> >
> >
> >
> > >From: "Ian  Willoughby" <ian@xxxxxxx>
> > >Reply-To: ukha_d@xxxxxxx
> > >To: <ukha_d@xxxxxxx>
> > >Subject: RE: [ukha_d] OT: Firewall
> > >Date: Tue, 22 Jan 2002 16:03:50 -0000
> > >
> > >I ran amoothwall for quite a while, nice solution but I am
now=20
> > >using an ASUS AAM6000EV ADSL router with built in NAT and
port=20
> > >forwarding. This gives me everything that Smoothwall did
(except=20
> > >logging) and lets me use netmeeting behind NAT straight out
of the=20
> > >box. This bit of kit cost me
> >=A3138
> > >including VAT from http://www.solwise.co.uk and it means I
now have=20
> > >a
> >spare
> > >PC (OK a backup HA PC).
> > >
> > >There are equivelent solutions for ISDN such as 3COM's
Lanmodem=20
> > >which offer similar features (I just happen to have one of
these=20
> > >going spare if you wan't to make me an offer), details at=20
> > >http://emea.3com.com/products/lanmodems/oc_isdn_st.html
> > >
> > >Regards
> > >Ian
> > >
> > >
> > >-----Original Message-----
> > >From: Steve B [mailto:steve@xxxxxxx]
> > >Sent: 22 January 2002 15:47
> > >To: ukha_d@xxxxxxx
> > >Subject: Re: [ukha_d] OT: Firewall
> > >
> > >
> > >if your a non linux person i would go for one of the
firewall=20
> > >distro of which there are many
> > >
> > >fli4l, smoothwall, freesco, etc
> > >
> > >Do a search
> > >
> > >
> > >----- Original Message -----
> > >From: steve.crick@xxxxxxx
> > >To: ukha_d@xxxxxxx
> > >Sent: Tuesday, January 22, 2002 2:54 PM
> > >Subject: [ukha_d] OT: Firewall
> > >
> > >What is the easiest, most efficient and cheapest way of
setting up=20
> > >a firewall for my home.
> > >
> > >I have an available PC with an ISDN TA and a Ethernet card.
> > >
> > >I would assume that the PC (firewall) would dial (and drop!)
on=20
> > >demand, so it could run headless without human intervention.
> > >
> > >I am not after a step-by-step 'how to do' guide; simply
some=20
> > >pointers/recommendations for right software to use.
> > >
> > >Thanks - Steve
> > >
> > >
> >
>*******************************************************************
> > >*
> > >This email and any attachments are confidential to the
intended
> > >recipient and may also be privileged. If you are not the
intended
> > >recipient please delete it from your system and notify the
sender.
> > >You should not copy it or use it for any purpose nor disclose
or
> > >distribute its contents to any other person.
> >
>********************************************************************
> > >
> > >
> > >For more information: http://www.automatedhome.co.uk
> > >Post message: ukha_d@xxxxxxx
> > >Subscribe:  ukha_d-subscribe@xxxxxxx
> > >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >List owner:  ukha_d-owner@xxxxxxx
> > >
> > >Your use of Yahoo! Groups is subject to the Yahoo! Terms
of=20
> > ><http://docs.yahoo.com/info/terms/>
Service.
> > >
> > >
> > >
> > >Yahoo! Groups Sponsor
> > >
> > >ADVERTISEMENT
> > >
> > ><http://rd.yahoo.com/M=3D215002.1818248.3328688.1261774/D=3Degroupweb/=
S
> > >=3D1
> > >705041992:HM/A=3D847665/R=3D0/*http://ads.x10.com/?bHlhaG9vbW9uc3Rlcjc=
uZG
> >
>F0=3D1011714750%3eM=3D215002.1818248.3328688.1261774/D=3Degroupweb/S=
=3D170504
> > >1992:HM/A=3D847665/R=3D1>
> > >
> > ><http://us.adserver.yahoo.com/l?M=3D215002.1818248.3328688.1261774/D=
=3D
> > >eg
> > >roupmail/S=3D1705041992:HM/A=3D847665/rand=3D782555182>
> > >
> > >For more information: http://www.automatedhome.co.uk
> > >Post message: ukha_d@xxxxxxx
> > >Subscribe:  ukha_d-subscribe@xxxxxxx
> > >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >List owner:  ukha_d-owner@xxxxxxx
> > >
> > >Your use of Yahoo! Groups is subject to the Yahoo! Terms
of=20
> > ><http://docs.yahoo.com/info/terms/>
Service.
> > >
> > >
> >
> >
> >
> >
> >_________________________________________________________________
> >Get your FREE download of MSN Explorer at=20
> >http://explorer.msn.com/intl.asp.
> >
> >
> >
> >For more information: http://www.automatedhome.co.uk
> >Post message: ukha_d@xxxxxxx
> >Subscribe:  ukha_d-subscribe@xxxxxxx
> >Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> >List owner:  ukha_d-owner@xxxxxxx
> >
> >Your use of Yahoo! Groups is subject to=20
> >http://docs.yahoo.com/info/terms/
> >
> >
>
>
>
>
>_________________________________________________________________
>MSN Photos is the easiest way to share and print your photos:=20
>http://photos.msn.com/support/worldwide.aspx
>
>
>------------------------ Yahoo! Groups Sponsor=20
>
>For more information: http://www.automatedhome.co.uk
>Post message: ukha_d@xxxxxxx
>Subscribe:  ukha_d-subscribe@xxxxxxx
>Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
>List owner:  ukha_d-owner@xxxxxxx
>
>Your use of Yahoo! Groups is subject to=20
>http://docs.yahoo.com/info/terms/
>
>




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


For more information: http://www.automatedhome.co.uk=20
Post message: ukha_d@xxxxxxx=20
Subscribe:  ukha_d-subscribe@xxxxxxx=20
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx=20
List owner:  ukha_d-owner@xxxxxxx=20

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/=20