LOL! Maybe what happened was that so many people said they couldn't get it to work, that I thought the default Net2phone PD wasn't correct. I'm guilty of being caught up in public opinion :-) Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Sunday, September 14, 2003 11:12 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Skype? http://www.ISAserver.org Tom's beig silly again.. That's the default Net2Phone protocol definition that cones with ISA... ;-) Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Sat, 13 Sep 2003 10:51:27 -0500 "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org Hi Paul, The VoIP applications are really problematic because of the complexity of the secondary protocols is requires. For example I recently learned that you need to configure the following Protocol Definition to support Net2phone: Primary connection: 6801 Secondary connections: 0 TCP Inbound 0 UDP Receive 1025-500 UDP Send 2000-2100 UDP Send Receive 3000-4000 TCP Inbound 7800-7900 TCP Outbound So, the key is to harass the dev's of the app who actually understand the protocols to help you with the config. The front link support will tell you to "open a port" (http://www.tacteam.net/openport.htm) which is clearly worthless unless you have a "open a port" button on your firewall ;-) HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Paul Robichaux [mailto:paul@xxxxxxxxxxxxx] Sent: Friday, September 12, 2003 3:33 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Skype? http://www.ISAserver.org > From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx> > Organization: eServices For You > Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Date: Fri, 12 Sep 2003 12:18:32 -0700 > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Subject: [isalist] RE: Skype? > > http://www.ISAserver.org > > >> I just downloaded Skype and have been playing with it-- it's a pretty > slick >> P2P VoIP tool. It works great when my laptop is plugged straight into the >> DSL modem, but something it does makes ISA have heartburn. Their FAQ >> (http://www.skype.net/help_faq.html) says that you need outbound TCP 80 > open >> (already done), plus send->receive on the high UDP ports. However, that >> wasn't enough to allow me to sign up for an account, much less use the >> service. Has anyone figured out exactly which ports have to be open? > > Any software that requires a range of ports to be open incoming and outgoing > has no place in a business environment, unless they work with the firewall > vendors so they can be configured for application layer filtering. Well, my business environment is mine, and there's some value to use in using a client like Skype since we have people flung all over the place. > However, this is from there website: > > "I can't connect to Skype from work or due to a restrictive firewall. Which > ports need to be opened in order to use Skype? > The Minimum requirement is to open up outgoing TCP port 80. In order to > achieve the best quality, also open up outgoing UDP for all ports in > stateful mode, so that replies to sent UDP packets are let in." Yes, I read that, and I understand the security implications. Receive-after-send is OK by me since it's restricted to particular client machines. I was hoping to hear from someone who actually had it working. > Now, if they feel that strongly about their product, why not work with MS or > other firewall vendors to get their protocol configured and added to > firewalls. That would make it easy to work with. I'd like to see them support either UPnP or Rendezvous (err, ZeroConf). ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* All mail from this domain is virus-scanned with RAV. www.ravantivirus.com ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')