Re: webcams behind firewalls

From: ITC(SW) Scott Smith (richard-smith@hawaii.rr.com)
Date: 02/25/02

  • Next message: Ian Pollard: "Re: ZA doens't seem to work with XP and IE" 

    From: "ITC(SW) Scott Smith" <richard-smith@hawaii.rr.com>
Date: Mon, 25 Feb 2002 21:22:11 GMT

    Eye of the Storm wrote:
    > On Fri, 22 Feb 2002 01:15:59 GMT, "ITC(SW) Scott Smith"
    > <richard-smith@hawaii.rr.com> wrote:
    >
    >
    >>For netmeeting, you need to set your router up to allow ports 1720,
    >>1503, 1731, 522, and 389 to the IP of the computer you are using for
    >>netmeeting. This will allow video and making calls via the ILS servers
    >>etc...Not sure what SMC menu allows you to do this but is commonly known
    >>as "port forwarding". Neetmeeting faqs all over have this information
    >>and can provide specific port details, i.e., what they are for...
    >>
    >
    > I tried all of these ports with Netmeeting and it never did work. The
    > software still uses some ports dynamically, so you have to open all
    > ports for it to function. Even then, NAT screws it up. The NAT
    > traversing function of UPnP is required and none of the hardware
    > router/firewalls support that.
    >
    > I did get it working in one direction - as long as one system is not
    > behind a firewall you can dial-up that system. But that system still
    > can't dial you.
    >
    > I haven't yet tried with the latest Microsoft Messenger, but to the
    > best of my knowledge it still works via the H.323 which dynamically
    > assigns ports.
    >
    aye, opening up or allowing inbound udp's 1024-65k on a firewall is
    neccessary. We don't allow it in my org to cross FW boundaries yet.. New
    proxy schemes are in the works but nothing yet.

    I am using a netgear rt314 and have just opened up the TCP ports using
    the rt's port forwarding feature to my 192.168.x.x address of the
    machine I normally use.. (NAT) Since it is connected 90%, the DHCP on
    the netgear doesn't change the address. Of course if it did, I would
    have to reconfigure the port forwarding feature. Not sure if SMC will do
    this in the same manner. I use netmeeting frequently without any
    related problems. Both via ILS and direct calling .

    Will have to do a little more research on how the rt314 handles
    requested incoming udp packets above 1024. I know the rt is dropping
    packets (or firewalling) to a certain extent (like a normal router). I
    Keep snort running on my linux box looking at my 192.168.x.x/24 and
    never see the zillions of port scans that you would normally see
    directly connected to the net via dsl/cable modem. Keep blackice on my
    w2k machines with same result.

    Didn't initially research it. Configured the rt314 and it worked. I then
    went on to the next project. :-) Now I'm curious. Gonna hafta take a
    closer look.

    R/Scott

    Relevant Pages

    • Re: What is broken:McAfeee firewall or my router ????? Urgent, ple
      ... your computer regardless of what McAfee firewall said. ... If your router is ... warned about those ports being available right away if you had any of those ...
      (microsoft.public.security)
    • Re: What is broken:McAfeee firewall or my router ????? Urgent, ple
      ... your computer regardless of what McAfee firewall said. ... If your router is ... warned about those ports being available right away if you had any of those ...
      (microsoft.public.security)
    • Re: How to stealth against ping/echo requests?
      ... I just started using the Online-Armor firewall. ... Some ports are even open. ... Are you behind a router? ... Every time it founds a new LAN, it asks if you want to trust it ...
      (comp.security.firewalls)
    • Re: adsl router security
      ... ]>used the virtual server feature to route packets on ports 21 and 80 to the ... ]>running ssh and mysqld but no other network services. ... if you can if the router is programable ... Remember all a firewall does is to prevent certain packets getting ...
      (comp.os.linux.security)
    • Re: FIREWALL- worth the effort ?
      ... I only use internet intermitently and "pull the plug out" ... Do you have a home Cable/DSL Router? ... forward any ports from the outside world to your Macthrough ... The other function of a firewall is to prevent out bound ...
      (comp.sys.mac.system)