Great Circle Associates Firewalls
(December 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Net2phone
From: Rachel Rosencrantz <rachel . rosencrantz @ predictive . com>
Date: Thu, 18 Dec 1997 12:47:11 -0500
To: "Jaime Blanco" <support @ sinfo . net>, <raptor-list @ udc . com>
Cc: <firewalls @ GreatCircle . COM>
In-reply-to: <199712180217 . CAA01352 @ mail . sinfo . net>

At 08:30 PM 12/17/97 -0500, Jaime Blanco wrote:
>Hi:
>I'm trying to set up the Eagle NT 4.0 so that clients behind firewall can
>use net2phone, I have created protocol Net2phone_TCP with port 3000 and
>Net2phone_UDP port 2500.  Then into GSP I have put Net2ph_TCP and
>Net2ph_UDP and they use the protocols created before.  However when I use
>net2phone on the logfile I see 
>
>Note 226 ....Packet droped Transparent Access Prohibited: Protocol UDP.
>
>I understand the eagle does not pass transparent UDP packets.

Yeah...this is a problem under 4.0 and earlier of Eagle.  I have
been told that they are supposed to fix the UDP limitation in 5.0.
The real problem is that UDP services must be directed at the firewall and
the firewall redirects the service to another machine.  This means you
can only have 1 machine receive udp packes at a particular address.

To get around this it is necessary to create a tunnel between the machines
on either side of the firewall that need to access the service.

The Raptor web page has a FAQ on creating a "local" or "null" tunnel,
which will create a tunnel that does not use authentication, if that
is what you need/want.

The services can be added to the filter and then you should be able
to get a UDP service to work through the Firewall.

-Rachel





References:
  • Net2phone
    From: "Jaime Blanco" <support @ sinfo . net>
Indexed By Date Previous: Port Descriptions
From: gary flynn <gary @ habanero . jmu . edu>
Next: Re: Net2phone
From: rob @ verio . net (Robert Roell -Network Intensive)
Indexed By Thread Previous: Net2phone
From: "Jaime Blanco" <support @ sinfo . net>
Next: Net2phone
From: "Jaime Blanco" <support @ sinfo . net>

Google
 
Search Internet Search www.greatcircle.com