How to develop streaming tcp application to be used by many users -- pass thru most firewalls



My situation:

Upgrading the TCP port of an application with an installed base of
thousands of users, all uncontrolled users(anonymous, individuals, or
businesses) from different locations across the globe.

The application used port 2222 to pass traffic. This was cumbersome
because every day people would call "the software doesnt work!" and it
had to be explained to each and everyone to open up port 2222 for tcp
traffic. This was difficult with the newbies who didnt know what a
firewall was. And Windows Firewall just makes it even worse (hate
that windows firewall)

Next we had a great idea -- let's use port 80 since everyone has port
80 open to the world. Well this worked great but now we have users
calling in saying "it will connect but I get nothing back". This is
because their firewall or ISP is acting as some form of a proxy server
or is not allowing persistent socket connections.

So I am given the task to figure out how AOL instant messaging and all
these big boys are getting around firewalls. Or not so much to "get
around the firewall", but how to best work with the firewall.

Do I just create two different policies:
1. connect via port 80.
2. if it fails, connect via 2222

Is there a better design? Has anyone encountered this and done
extensive research? I cant find any documentation on how "big boys"
are handling this
.



Relevant Pages

  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)