Block All Ports for a Host

We are using BM 3.9 (no SP1 yet).
I'm trying to block a Windows Media Player stream. If I put the URL that WMP uses into a deny rule, the BM log shows the html page is forbidden, yet the media still comes through.
So I tried blocking all ports on the host. I put in a Deny rule that blocks All TCP&UDP on both the IP address and the host name. Yet, when I type the URL into WMP, I still get the stream. How do I block this with BM?
Incidentally, after All ports didn't work, I tried specifying ports 0-65535. But I got an error that that was an invalid range. It did let me use 1-65535, though.

David,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

  • WRV200 Access Restriction on all ports for a time period?

    I have a system that needs to be restricted to only having internet access for a small window each day. I have been looking at the Access Restriciton tools for htis but it looks like I would need to block each possible port with its own policy. This seems very inefficient and complex. Is there a way to make a rule that blocks ALL ports for a time period?
    Thanks!

    Under Firewall>Access Restriction when you are creating an Access Policy under Blocked Services you can select TCP, UDP, or IP. If you select IP it will block everything instead of a specific port. You will have to create a rule for each IP on your network that you do not wish to have access outside of your selected window.

  • Xserves blocking all ports upon reboot [Firewall issue]

    Almost every time I need to shut down/restart my new Intel Xserves, they block all their ports upon reboot and I can't access my SAN or VNC into the servers (every network port/fiber port gets blocked). I found the solution for this is to run:
    -sudo serveradmin stop ipfilter
    -and then reboot and then everything is fine again, strangely.
    -However if I keep the firewall disabled (as a temp fix) my client machines cannot access the internet or LDAP.
    I was just wondering if anyone else has ever encountered this odd glitch and how to stop it from happening. It's not too much of a big deal at the moment since I'm on campus but in the future I will not be and I'd have to travel up here to fix it.
    Is this a problem with OSX Server?
    Message was edited by: evets90

    If this is two systems and involves a disk wipe and install hasn't cured it, then this is usually not the servers, but something else on the network that's common.  Though I don't have a way to explain all of what you're describing, and particularly the effects on the "fiber ports".  This effects the fibre channel (optical) SAN ports?  That's definitely odd.  What happens?  Or do you have fiber-optic network connections?
    How are you testing for blocked ports here?  Using dig and ping and related tools, or using a higher-level application?
    I have seen cases where some firewall process goes nuts and clogs up a server.  But that's not usually both servers.
    Check the server logs for any related details, and see if there are any rogue CPU-bound processes.
    And check the local area network for problems with DNS services, with errors with IP routing, with errors around subnet routing configuration (use unique IP addresses in distinct subnets for both controllers, unless you're using link aggregation), etc.

  • Xserve blocks all ports after reboot - Firewall related

    So I have two Xserves that love to just decide that upon rebooting, they will block their external ethernet port as well as their fiber ports after rebooting.
    I can confirm this is a firewall bug because the problem is fixed when I do a "sudo serveradmin stop ipfilter" and reboot, and keeping the firewall off prevents the issue entirely.
    Now of course this isn't safe and I want the firewall on all the time.
    How do I fix this? I have noticed this bug persists even after a total clean reinstall of OSX Server.

    If this is two systems and involves a disk wipe and install hasn't cured it, then this is usually not the servers, but something else on the network that's common.  Though I don't have a way to explain all of what you're describing, and particularly the effects on the "fiber ports".  This effects the fibre channel (optical) SAN ports?  That's definitely odd.  What happens?  Or do you have fiber-optic network connections?
    How are you testing for blocked ports here?  Using dig and ping and related tools, or using a higher-level application?
    I have seen cases where some firewall process goes nuts and clogs up a server.  But that's not usually both servers.
    Check the server logs for any related details, and see if there are any rogue CPU-bound processes.
    And check the local area network for problems with DNS services, with errors with IP routing, with errors around subnet routing configuration (use unique IP addresses in distinct subnets for both controllers, unless you're using link aggregation), etc.

  • Open all ports for gaming

    Hello yes I am trying to play call of duty for PC and my internet is slow... 30Mbps,30Mbps.... I read up online that I need all my ports open to have my NAT type open....Sadly i dont know how do to this. Can anyone explain?

    samgun1993 wrote:
    Hello yes I am trying to play call of duty for PC and my internet is slow... 30Mbps,30Mbps.... I read up online that I need all my ports open to have my NAT type open....Sadly i dont know how do to this. Can anyone explain?
    Put the machine in the DMZ
    Logon to the router as admin
    select firewall settings
    select dmz host
    check the dmz host ip address and enter the ip address of your gaming machine
    say OK
    Be aware that putting the machine in the DMZ exposes it completely.
    So an alternative is to forward the ports
    I belive they are 3074 for the game and 3658 for voice
    logon to the router as admin
    select firewall settings
    select port forwarding
    select new entry
    specify the ip address of the machine
    under protocols select user defined
    give the app a name
    select new server ports
    select tcp for protocol
    select source port any
    select destination port single and 3074
    say ok
    repeat for the other port
    You'd be better running wired than wireless.

  • Opening spesific incoming and outgoing ports for game hosting for instance?

    I have tried this for a little while now and can't really figure it out. Seems like you are required to get ip-adresse aswell, but in fact Battle.net for example doesn't have one. I know that it requires to open ports: 6112-6119, 116 and 118, but no specific ip. Please help figure this out! I got to be able to host a game. The game is Warcraft 3; Frozen Throne. If you know the exact answer please answer me at [email protected] I really need help at this.
    Thanks!

    The IP address required would be the one you assign the device that will be hosting Warcraft 3. This device will be on your local area network (LAN). In order for others on the Internet to access it, you will need set up your router for port forwarding/mapping.
    Port forwarding/mapping basically takes two steps:
    - Assign a static IP address to a device on your LAN that needs to be accessed from the Internet.
    - Open port(s) in your Internet routers firewall.
    What is the make & model of your Internet router? ...is it an AirPort or another vendor's product?

  • Multiple IP vs Same IP multiple port for virtual hosts

    Anyone have any recommendations or experience in setting up a virtual host that has a listener for each site?
    The issue is when I have to restart a single site, I have to restart them all, because they are installed under the same listener/server.
    I need a setup where I can install and manage each website (on the same box) on it's own listener/server instance so re-starting one site doesn't effect another.

    Add a service in the Network preference pane. Select the network interface you want; e.g., Ethernet. Configure as desired. Apply and test.

  • FIPP workflow blocking all documents for release

    We have developed and configured workflow for object FIPP and want this workflow trigger onlly for AP parked documents. Now workflow is triggering for AP documents only but
    all other documetns which are parked also blocked for release and no workflow and does not alllow fo  psoting. How can we stop this..

    I have done that ,so workflow is not generating but the other documents are blocked for release with out workflow.
    GL documetns posted with tranaction fb50 is also blocked for release with out workflow

  • I want to block incoming ports WRT54G!

    Hi!, I want to block some ports for aplications from incoming data , im enabling the router "Wrt54g" firewall and disable Upnp. Ok im going to grc.com "Shieldsup test" are stealch! All apps ( nod32, firefox, messenger msn) can open ports! Why the applications turn on the ports? , Do they appear "stealch" but not closed? From outgoing ports im using comodo firewall on vista. Thanks! and sorry my english!

    on the router's web ui , click on the "access restrictions" tab and block the ports you want ...

  • Block TCP ports?

    I have a customer that has an Airport setup for their clients (it is a restaurant) and they have been hit with some DMCA notices, as someone is downloading torrents while on their network.
    How do I block all ports but 80 on the Airport?

    Look for a firewall.  I am sure there are some.  Not sure of the requirements though. 
    It looks like whispermonitor may be a good option.

  • Is there any way to block USB ports through SCCM console

    How to Block the client machine USB ports using SCCM 2012 R2 console
    we know that so many 3rd party tools are able to block the USB ports for client machines, how cant we add an additional option for SCCM 2012 for Block USB ports for client PC's, to make our network secure
    thanks & Regards,
    Teja

    That's not possible by default, but you can create your own custom script and add it as a right-click action to a device.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Block USB Port

    I plan to buy a new iMac for my staff on work on my precious data. I want to block USB ports for the safety of the data. is there any way in snow leopard?
    I am also told that key board and mouse also use USB port to work in iMac. If I get to know how to block access to USB ports, will the key board and mouse work?

    Your specific question has been talked about at this url:
    http://www.macintouch.com/readerreports/security/topic3177.html
    ...perhaps something there will fit your needs, resources, etc.
    Just understand that there are more connections, including wireless that will still provide means of moving data. Then there is email, burning CDs and of course FireWire and printing.
    The link above discusses connecting the work computers to an OS X Server as part of the solution, and that may be a good direction to consider to help deal with the overall data security situation. Good luck.

  • List of ports for all the WCI services

    I'm trying to figure out why collab cant talk to the CNS, and I see in the log:
    "Attempting to connect to teh notification server at host=blah (udp heartbeat port=28282 ..."
    aarg. where is the configuraiton for this? can't find it anywhere.
    Has anyone created a complete list of source - destination ports for all the new components?
    I"m going to start writing them down here:
    http://wiki.oracle.com/page/Webcenter+Interaction+Deployment

    Hi Joel,
    I have had a similar problem before but I am not sure if it is related to this, if you take a look inside the PTHOME/settings/configuration.xml file you will find some extra parameters which are not listed in the configuration manager for collab.
    I suggest trying some of these settings to see if they coincide with your issue. The problem I had before was when a port that was not even listed in the config manager was blocked by my firewall.

  • Open ports for all in LAN

    Hi, a few days ago I bought a wireless router WRT160n. I want to ask how to open some port for all in LAN(3 clients). For example all in LAN have PeerToPeer application for torrents. I want to open port for example 20202 for all. Now I open port from menu Applications & Gaming->Single Port Forwarding, but I must set port for each user IP address.
    Can somebody tell me how to open port for all in LAN without to config for each computer?
    Thanks in advance.

    Hi gv. I read more about UPnP and the WRT160n User Guide. In section Administration>managment int wrote that UPnP is Enabled by default in my router it is corect. I Setup mu PeerToPeer(eMule) TCP/UDP ports to 20202 and check option "Use UPnP to setup ports". I test and close this port on my router configuration for my computer on "Single Port Forwarding", but in eMule the port is still block. Can you explain why it did not work. For UPnP it says that if Enable it allow users with Windows ME and XP automatically to gonfigure Router ports
    Thanks in advance!
    Best Regards.

  • Can I open a port range in the firewall for one host?

    Can I open a port range in the firewall for one host?  In other words, I want to be able to open ports 54001 to 54050 to allow one remote host in my LAN to access that port range in my Mac Server.  Is this possible?  Currently, the only option I see is to open individual ports for all external hosts (eg http or https)
    Thanks in advance!

    Which version of OS X Server are you using?
    Server 2.2 and earlier includes an interface to a software firewall that can be configured to open specific ports very easily. Descriptions of how to configure the firewall can be found in the documentation for these versions.
    Server 3.x no longer has an interface to the software firewall - it is still there, but you need to use other methods do configure it.  A popular example of such a method is the icefloor utility.
    Apple suggest that for Server 3 you delegate firewall duties to an external router.  Server 3 includes the ability to configure the firewall component of Apple Airport routers 'automatically'
    if you connect a machine running Server 3 directly to an Airport Router the router appears in the LH pane in the Server.app window (usually second line, below the entry for the server itself), and you can control what services are 'enabled' through the firewall there.
    a more common solution perhaps is to use a non-apple router, and configure the firewall (and so open specific ports) through whatever control interface is provided for that router.  There are many many kinds of hardware router you could use, and the control interfaces used vary widely - so you will have to consulting the documentation for your own router to work out how to do this.
    If you post information about your software versions, and hardware configuration, it is possible that you can get more specific help with the tasks involved in opening the ports.
    Hope this helps.

Maybe you are looking for