RE: Skype?

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 14 Sep 2003 12:12:59 -0500

LOL! Maybe what happened was that so many people said they couldn't get
it to work, that I thought the default Net2phone PD wasn't correct. I'm
guilty of being caught up in public opinion :-)

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Sunday, September 14, 2003 11:12 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Skype?


http://www.ISAserver.org


Tom's beig silly again..
That's the default Net2Phone protocol definition that cones with ISA...
;-)


  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Sat, 13 Sep 2003 10:51:27 -0500
 "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org


Hi Paul,

The VoIP applications are really problematic because of the complexity
of the secondary protocols is requires. For example I recently learned
that you need to configure the following Protocol Definition to support
Net2phone:

Primary connection: 6801
Secondary connections:
0 TCP Inbound
0 UDP Receive
1025-500 UDP Send
2000-2100 UDP Send Receive
3000-4000 TCP Inbound
7800-7900 TCP Outbound

So, the key is to harass the dev's of the app who actually understand
the protocols to help you with the config. The front link support will
tell you to "open a port" (http://www.tacteam.net/openport.htm) which is
clearly worthless unless you have a "open a port" button on your
firewall ;-)

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Paul Robichaux [mailto:paul@xxxxxxxxxxxxx] 
Sent: Friday, September 12, 2003 3:33 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Skype?


http://www.ISAserver.org


> From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> Organization: eServices For You
> Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Date: Fri, 12 Sep 2003 12:18:32 -0700
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Subject: [isalist] RE: Skype?
> 
> http://www.ISAserver.org
> 
> 
>> I just downloaded Skype and have been playing with it-- it's a pretty
> slick
>> P2P VoIP tool. It works great when my laptop is plugged straight into
the
>> DSL modem, but something it does makes ISA have heartburn. Their FAQ
>> (http://www.skype.net/help_faq.html) says that you need outbound TCP
80
> open
>> (already done), plus send->receive on the high UDP ports. However,
that
>> wasn't enough to allow me to sign up for an account, much less use
the
>> service. Has anyone figured out exactly which ports have to be open?
> 
> Any software that requires a range of ports to be open incoming and
outgoing
> has no place in a business environment, unless they work with the
firewall
> vendors so they can be configured for application layer filtering.

Well, my business environment is mine, and there's some value to use in
using a client like Skype since we have people flung all over the place.

 
> However, this is from there website:
> 
> "I can't connect to Skype from work or due to a restrictive firewall.
Which
> ports need to be opened in order to use Skype?
> The Minimum requirement is to open up outgoing TCP port 80. In order
to
> achieve the best quality, also open up outgoing UDP for all ports in
> stateful mode, so that replies to sent UDP packets are let in."

Yes, I read that, and I understand the security implications.
Receive-after-send is OK by me since it's restricted to particular
client
machines. I was hoping to hear from someone who actually had it working.
 
> Now, if they feel that strongly about their product, why not work with
MS or
> other firewall vendors to get their protocol configured and added to
> firewalls. That would make it easy to work with.

I'd like to see them support either UPnP or Rendezvous (err, ZeroConf).


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: