IChat used to work, now does not.. same chat partner even....

Question

Ok, this is REALLY weird.
Some details-
Me Leopard 10.5.2
Firewall= iChat enabled
Quicktime= None (streaming band width)
Internet sharing OFF
Links sys wireless router WRT54GSV4
Enabled Both UDP/TCP on 5190, 5678, 16384-16403
Enabled UDP only on 5060
nothing set up for 5220, 5222 (jabber- dont use it)
nothing set up for 5297-5298 (internal communication, not needed to outside world for iChat)
Router running in gateway mode with udpnp enabled.
Router serving as DHCP server computer is always getting internal address of 192.168.1.101
Cable modem plugs into router and thats it for the network.
NO I DO NOT have 101 devices... we just started at 100 for IP assigning (we have 2 computers, 1 PC 1 MAC)
Now, sad story please read on and offer your help.
I WAS (past tense) able to chat with another family member in VT who is also running leopard and who is using a NetGear wireless router (known good for iChat) .
Here is the story, sorry it is long but I hope someone will spot what I missed if I give enough details.
Prior to december 21st I was using my setup (leopard see above) and was chatting (always VIDEO) with parents in MN as well as other relatives in VT (we live in UT). Both of these people were running tiger, both using netgear wireless routers (different ISP obviously). Had an issue chatting to the individual in VT at first, but changed their iChat preferences under accounts to use port 1080 for the aim oscar login (from 5190) and it worked every time from then out... good nuff...
So, I go to MN for Xmas and find out we cannot chat from their computer to the one in VT, both were tiger... turns out I was upgrading the MN computer to leopard for Xmas... so I upgrade and its still not working. I went into the net gear router and endabled TCP and UDP on ALL the ports I listed for my set up (ALL Of them, even the Jabber and "Internal" ports). I set up the leopard firewall to enable iChat and set the quick time etc etc... and whalla it worked to chat to VT, but only if we the same computer initiated the chat, i.e. had to be from MN (leopard)===> VT (tiger) (I THINK... **** wish I remembered this).
ANyhow, we did not care, it was a temporary thing (my wife wanted to chat with her sister) so those computers did not really need to chat much and it was good enough for us ....
Now... we fly back to our house (NO ONE WAS THERE i.e nothing changed on the computer) and now we cannot chat to VT (runing tiger) but we could 8 days ago. So, I looked into the error messages... it initiates, starts and then ends the chats with an error -7 message and later yeilds an error -8. I know the -7 can be a time out so I check our true speed and found at least 1Mbps both here and in VT. I figured maybe a security update changed something either in leopard or tiger, so I carefully configured my firewall, quicktime, and router (as well, no one is internet sharing) and everything else I could think of (even switched off DHCP for a while) to NO avail. After all this I confirmed (1 minute ago) that I CAN chat back to MN which is now upgraded to leopard with the NetGear wireless router and all the ports open etc etc...
The computer in VT has the usual set up with the 10.4 firewall ports enabled according to the Apple SOP (read the document in apple support if you need to know what this looks like). It also is not internet sharing, its quicktime is enabled and the et gear router appears appropriately configured with TCP and UDP enabled on ALL the ports I listed under my set up (ALL OF THEM just in case)
I have tried enabling ALL of the ports (i.e. the jaber and internal ports.. but this is pretty stupid on my end since I am using LEOPARD and it only requires a single port to chat (starts at 16384 and goes up to 16403 until it finds one open), but I was not sure what happens with a leopard - tiger iChat so I tried it, still broken.
One potential clue (or a red herring?). My sister-in-law HAS to use port 1080 for the AIM login, if she tries 5190 she gets kicked of AIM immediately (YES her firewall is configured to let that out as well as the portforward (TCP and UDP) is configured on the netgear wireless router. This seems strange to me and I almost want to call her and double triple check that she has all this correct.. but IT WORKED 8 days ago (we used it literally 3-4 + days a week, it working was NOT a fluke).
Anyhow, sorry for the book. Any and all help appreciated I have tried to do my homework but am now stumped and hope I did not miss anything super obvious.
me
SO. . . .
What changed?
What is left to "fix" and most important
Who broke this so I can hunt them down (just kidding)... but seriously, what gives. Am I missing something OBVIOUS... like apple said we broke tiger too leopard chats and you have to buy leopard or something else reminiscent of the iPhone story (sorry, inappropriate jab, I just beat myself).

Answer 1

Ok- obviously I was tired and did not communicate.
Here is the simplified problem.
We live in UT, my parents live in MN, my wifes sister and parents live in VT.
3 computers
UT= 10.5.1 iMac silver case new computer purchased with 10.5.0 and IMMEDIATELY upgraded to 10.5.1 prior to running a single app. LinkSys wireless running in gateway mode.
VT= Leopard iMac core duo white (last years) with NetGear wireless adapter
MN= Leopard iMac core duo white (last years) with NetGear wireless adapter
This is how it was prior to Christmas
WE left UT and flew to MN where one of the iMacs lives. We were able to (FINALLY) chat with the VT iMAC (still running leopard) after UPRGADING the MN iMAC to Leopard version 10.5.1 and making some changes to the router and Mac Firewall as well as quicktime streaming settings. Then the chat would work from MN-VT.
We FLEW home to UT, where our leopard iMac had been sitting gathering dust for 8 days. It no longer can chat with VT, but it can chat perfectly well with the MN computer, which of course is now running leopard 10.5.1
So- I can assure you nothing changed on my computer while I was sitting in MN eating Xmas dinner and the computer sat in an empty house in Utah. Nothing, I am told, changed on the computer in VT.. and I can still chat to MN
I tried to mark my replies with an asterics, strangely they are in the message when I try to edit it but I do not see them all in the post... so if you see them great... if not you will have to read to find my replies... sorry.
OK Solution(s)
Get all the routers set to do UPnP
*all ready there
On the Linksys this is in Adminstration.
Disable then Delete all the Port Forwarding you have set and Save Settings.
* this seems strange most iChat communication help messages start with the individual being told to put this in place. Tell me why this should be done, I am curious what you think is the issue here.
In the Netgears it (UPnP) should be in it's Own menu.
Delete (As there is no Disable) the Port Forwarding settings.
Save settings
* Again, I will try this since it obviously did not solve the problem but again, I am curious what you think the core issue is here.
In the Linksys go to the Security page and Disable the Anonymous Ping Blocking
Save Settings.
*No anonymous ping blocking setting there... but I disabled the filter anonymous requests line.
In the Netgear go the WAN pages and Disable the Dos (or SPI) line. It is a Check to Do this.
Also check the Box to Respond to Pings on the WAN port
Save Settings
Yes it is a good idea on the Tiger computers to have the Firewall On and the ports set.
TCP 5190, 5220, 5222, 5223, 5298
UDP 5060, 5190, 5297, 5298, 5353, 5678 16384-16403
(this will include the ports from Leopard machines)
http://docs.info.apple.com/article.html?artnum=93208
*Yes, I concur with your statement, this is why I told everyone this is what I have set up, its in the apple recommendations for iChat.
It is better that the Leopard Firewall is On and set to Allow Specific apps ans services.
If set before the 10.5.1 Update then delete the apps in the list.
Set to Allow All.
The set to Allow Specifics and re-add apps
This is because of a problem with the 10.5 firewall and settings being held over.
*not an issue, computer purchased with 10.5.0 and immediately upgraded but I all ready tried this anyhow, and its not the fix.
The port iChat uses to Login for the AIM server can be changed when not logged into AIM.
WE suggest port 443 as it is also used for Secure mail. In Tiger it means the port is likely to be open in the firewall for another app and not need setting.
*Great, that makes sense, thanks for your informative response.. I like to know why I am doing things, it makes me that much better fixing my own issues. Seriously
In Leopard the firewall works by Application and it will open any port the app uses. (it gets a"certificate" from the firewall).
* I sorta figured it worked this way or in some similar fashion when I configured it to allow iChat, this again makes sense but it is all ready in place.
In fact it is possible to log in to the AIM server on virtually any port.
*OK, for another time but is this relevant... why is it that the VT computer can log into AIM using 1080 but NOT 5190.. odd.. anyhow no need to reply if this is not relevant to me being unable to chat to VT but if you consider it worth pursuing let me know.
Some find for Tiger/iChat 3 that separating the UDP and TCP bits of port 5190 helps
*I will check this on her MAC firewall settings over the phone.
I think I have got most of this.
*My bad, it was a rather confusing post.. I hope I clarified
Thanks for you help so far.
Basically simplify things in the routers first.
Then recheck your Leopard settings as
1) you have miss-named them
2) possibly referred to other places
3) have not mentioned half of them.
Which other half would you be interested in?
I am making the changes and will reconfirm everything above and post my chat status... working with computers now.
Message was edited by: Rufessor