IPs, URLs, or Ports to open to allow Flash updates?

I have a firewall in place that only allows my students to go to a hand full of sites and I would like to allow adobe flash player to update. Which IPs, URLs, and/or Ports do I need to allow so flash player can always get it's updates? Thanks!

Wireshark will list all network packets that leave your system or come in. It's basically a firewall without the security stuff on top. Set its filtering to HTTP packets and the domain filtering rule to andything with Adobe in its name. then you wil lsee whether those packets get stuck in your local router or elsewhere - they will not have the relevant ACK packets that confirm a packet has been received by the server. Completely lost packets will also be flagged according to the colro you set (red by default). It's a free tool, so nothing's lost by trying...
Mylenium

Similar Messages

What urls and ports need to be allowed through our corporate proxy firewall?

We have been paying for Creative Cloud for teams for over a month, but are unable to install any applications. Our 'Ironport' proxy keeps blocking the downloads.
We have asked our security team to allow the following urls but to no avail!!
ccmdl.adobe.com:80
swupmf.adobe.com:80
swupdl.adobe.com:80
Are there any other addresses or ports that should be allowed?
Thanks.

Hi,
For the Creative cloud you should put the following port combinations in the whitelist
cmdls.adobe.com:443
im s-na1.adobelogin.com:443
na1r.services.adobe.com:443
prod-rel-ffc-ccm.oobesaas.adobe.com:443
lm .licenses.adobe.com :443
You can also see the craetive cloud deployment guide as well for more information. Here is the link
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/CC T_IT_Deployment_Guide.pdf
Thanks
Kapil

Outbound port to open

I need to send a request to the infrastructure people saying which firewall ports to open to allow my SQL Server to extract data from an external SQL Server. (I can't test anything and they want a few ports or small range).
I need to be able to connect from my server behind the firewall to the remote server - I guess the preference would be to use SSIS but would also like to be able to create a linked server connection.
So which outbound ports would I need to be opened? I assume the destination would use the same port for the response? Does anything need to be done to allow that?

I don't have any experience of enterprise-level firewall products, but the consumer-level firewalls I have used (Outpost, Kaspersky, ZoneAlarm etc), typicall permit outgoing traffic per
application. That is, if I don't like Windows Media Player calling home, and I only use it to play files on my own machine, I can tell the firewall to block all outgoing traffic from WMP. A good firewall also lets me restrict an application to
only use a certain port, a certain protocol or connect to a certain IP address.
Blocking outgoing traffic per ports is completely crazy. And while the world of IT is full of people on high horses who know a lot less than the height of their horses, I would not expect a firewall administrator to be that stupid. (Because it would break
down very quickly.) I suspect that you and the infrastructure people are talking past each other.
What probably needs to be open is the incoming port on the remote server. That is, if that server is listening on port 1433, that is the port to open.
As an example, while I can access the web in general from work, there is web-attest system that I can't access. This is sure due to that the URL includes :9898.
Erland Sommarskog, SQL Server MVP, [email protected]

Opening port in Firewall to allow media sharing with PS3

What I'm trying to do: Stream media from my G5 to my PlayStation3 using Nullriver's Media Link.
It would not work and I've determined that it's the Firewall that's the problem. I've read elsewhere that the firewall in my router (Airport extreme) will suffice and that the G5's firewall is redundant. Even if that is true I'm still puzzled as to why I couldn't open a hole in the firewall.
I turned on Firewall Logging under advanced in the sharing preference panel, then told the PS3 to search for media servers.
Looking at the ipfw log in Console tells me "...ipfw: 12190 Deny TCP 10.0.1.5..."
So 12190 must be the port that needs to be open for things to work, right?
Here's where I must be goofing up... I go to system preferences>>Sharing>>Firewall.
Then click "New." From the Port Name pop-up, I select Other and then name the hole I intend to open.
Then in the field "TCP Port Number(s)" I enter 12190.
My new item now appears in the list on the firewall pane with a check next to it and when the mouse hovers over the item the tag that pops us tells me that all network traffic on port 12190 is being let through.
Meanwhile in the background, Console reports every minute that the PS3 is being denied access at that port!
I tried restarting the system.
It would be nice to know if it is indeed true that the firewall in OSX is redundant.
But more puzzling is why I can't get this port to open.
Thanks!

Still no luck.
Tried deleting that pref file. Reboot. Created new port opening as before. Still shows that same symptoms.
Tried WaterRoof. When I call up the static rules, it shows the port in question.
"allow tcp from any to any dst-port 12190"
I selected it in the list, clicked the button to edit it, changed nothing, then clicked apply. (I did this in case maybe Waterroof needed to "nudge" things to get them to work right. After this, I was unable to change any settings on the Firewall using System Preferences.
Maybe I'm not using WaterRoof right.
Strange that when I used Terminal as you suggested, it shows a firewall deny at 12190, but WaterRoof says the rule is to allow.
Could there be something wonky going on with the Airport Extreme?
To my non-network savvy brain that doesn't make sense but I bring it up since it's the only other device involved.
If I turn off the firewall on my G5 using System Preferences then everything works fine. Would the Airport "know" what the firewall on my computer was doing?
It's my understanding that the Airport Extreme's firewall protects the network from outside traffic, not that it would protect devices on the network from each other.
I was going to try opening a port on the Airport, but the fields in the Airport Utility are more complicated than those in System Preferences. Figured I should wait before I did anything stupid.
The next thing I'll try is running MediaLink on my wife's Intel iMac. She's running 10.4.11, too, but if I can open a port on her machine, that will narrow things down. Will report back tomorrow.
Thanks.

Ports to open between Java application server inside firewall and Java CI

What ports do I need to open to allow a J2ee App server 7.0 to communicate with the Java Central Instance inside the firewall??
thank you !
Ld

Why Database ports? seems like the Central Instance would be the only one talking to the Database no?
thanks...
This is for CRM eCommerce....

Why do ports remain open after closing Firefox?

I have noticed recently that several ports associated with Firefox remain open when the Firefox browser is closed. The number of open ports increases each time Firefox is opened and I have seen that the number of open ports has reached to more than 1,000 open ports at a time. The majority of the open ports are outbound TCP using port 443 and I also note a sustained increase in the network traffic after Firefox is closed.
I have observed ports opened by the Explorer browser and noted that all of the ports opened with Explorer close when the Explorer browser is closed. The Firefox ports remain open when the browser is closed.
Questions:
- Should all open ports associated with an open Firefox browser close when the Firefox browser is closed?
- Does Firefox have a setting that closes all open ports when the Firefox browser is closed?
- Does XP have a setting that will close all open ports associated with Firefox when Firefox is closed?
- Should I have security concerns about the accumulating open ports and increased network activity when using Firefox?
Thanks.

You can set the pref browser.download.manager.quitBehavior to 2 on the about:config page.
See http://kb.mozillazine.org/browser.download.manager.quitBehavior
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website. 
If you see a warning then you can confirm that you want to access that page.

What ports to open on ADSL router for ePrint

My HP ePrint printer is behind an ADSL router with firewall/NAT functionality. The printer has an internal ip address.
Incoming connections from the internet are by default denied unless I open specific ports and protocols on the firewall and do natting to the internal network. What do I need to to open to allow HP to send print jobs to my HP printer at home?

This setup works for me on a port-based firewalled NAT router with all inbound/outbound TCP/UDP ports blocked from 1 to 65535 except those enabled out of necessity like DNS (UDP/TCP port 53). I added TCP port 5223 (XMPP over SSL) outbound only to the NAT firewall. TCP port 443 (HTTPS) outbound was already enabled. No UDP ports. No inbound. No need to do NAT port forwarding. Port 5222 (XMPP) also works for me but it's unencrypted, I believe.
It takes several minutes for the ePrint service to get established but it does eventually work. I think the printer tries to connect to the ePrint service on port 5222 first and when that fails it tries 5223 so it takes a little more time to get connected. But, that's just a guess.
See http://xmpp.org/rfcs/rfc3920.html if you care to know more about XMPP.

Excessive no. of ports remaining open with HttpUrlConnection

Hi,
I am facing problem where excess no. of TCP ports getting opened or remaining open on client of my application (from where I send XML requests to application).
The scenario happens when I simulate a load of 100 concurrent requests through JMeter (SOAP/XML-RPC requests)
Client app is deployed on Tomcat 5.5 on a Linux box.
My code looks like follow:
try {
URL url = new URL(<url string>);
HttpURLConnection httpURLConnection = (HttpURLConnection) url.openConnection();
httpURLConnection.setRequestMethod("POST");
httpURLConnection.setConnectTimeout(10000);
httpURLConnection.setDoOutput(true);
OutputStreamWriter outputStreamWriter = new OutputStreamWriter(httpURLConnection.getOutputStream());
outputStreamWriter.write(<write something>);
outputStreamWriter.close();
BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(httpURLConnection.getInputStream()));
<read buffered reader here>
bufferedReader.close();
} catch {}
finally {
httpURLConnection.disconnect();
}What's wrong here that is causing excessive TCP IP ports to remain open?
Also, I want to restrict the no. of Http connections that I can make from client to server. Is this possible?
I searched about <Connector acceptCount=<> .... > in server.xml on Tomcat. But it is about incoming connections on Tomcat port and not the outgoing connections. I also explored -Dhttp.maxconnections but it doesn't serve my purpose. Only option I can think about is creating a custom object pool for HttpConnectionUrl (which I would like to avoid due to some reasons)
Is there any built-in support/ready API/tool to restrict no .of connections while sending Http requests?
regards,
suraj

I am facing problem where excess no. of TCP ports getting opened or remaining open on clientCompared to what?
The scenario happens when I simulate a load of 100 concurrent requests through JMeter (SOAP/XML-RPC requests)Aha.
What's wrong here that is causing excessive TCP IP ports to remain open? Nothing except your definition of 'excessive'. You are simulating hundreds of clients on one client host so you will get all the bahaviour of those client hosts in your single client host. The problem is in the simulation, not the TCP ports.
Also, I want to restrict the no. of Http connections that I can make from client to server. Is this possible? Why?

Intrusion-detection-module 7 data-port 2: Capture not allowed on a SPAN destination port

Hi all
I have 2 switches Cat6509E. each with IDSM module
I have on first switch this commands
intrusion-detection module 7 data-port 1 capture
intrusion-detection module 7 data-port 2 capture
intrusion-detection module 7 data-port 1 capture allowed-vlan 4,6,16,17,66
intrusion-detection module 7 data-port 2 capture allowed-vlan 68,70,74,134,145
And when I trying to put the same on second switch I will get this error message
Intrusion-detection-module 7 data-port 2: Capture not allowed on a SPAN destination port
What does it mean?
Output "sh monitor" is the same on both switches
Session 1
Type                   : Service Module Session
Modules allowed        : 1-9
Modules active         : 1,7
BPDUs allowed          : Yes
Session 2
Type                   : Local Session
Source VLANs           :
    Both               : 4
Destination Ports      : analysis-module 8 data-port 1
Peter

Hi Peter,
     The first switch that you mention is configured (judging from the "intrusion-detection" commands) to use the VACL capture method of sending traffic to the IDSM-2 for inspection. You can read about this method here:
http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_idsm2.html#wp1030828
In short, you configure a VACL to define the traffic you want to capture and apply it to the appropriate VLANs. When traffic matches the VACL, it's copied to the IDSM-2 ports that have been configured with the "intrusion-detection module 7 data-port 1 capture" commands.
On the second switch it appears that there is a monitor session setup SPANing traffic to the IDSM-2 port. This is an alternative method of sending trafic to the IDSM-2 for inspection and is mutually exclusive with the VACL method on a particular IDSM-2 interface. You can read about the SPAN method here:
http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_idsm2.html#wp1030816
This method, in short, simply involves configuring a SPAN session with the IDSM-2 interface as the desination.
You'll need to choose one method or the other for configuring the second switch. If you want it to match the configuration on the first switch, simply remove the monitor (SPAN) session that's currently configured.
Best Regards,
Justin

Which URL to use to open a financial report from a Task list ?

Hi,
I've got a big issue in Hyperion Planning : I do not know which URL to use to open a financial report from a task list.
If I use the Smartcut (given when you do a right-click on the report, then Properties), a tab is opening (normal behaviour), but another tab is opening under the tab, which is very ugly, and moreover which prevent from using the PDF/HTML display icons !
Is someone know which URL to use to display correctly a financial report when opening it from a task list ?
It's an emergency, please help !
Thanks very much.
Virgile.
PS. : we use Internet Explorer 8 and we use 11.1.2.1 Hyperion Planning version
Edited by: 808808 on Jan 5, 2012 3:41 AM

Hi,
OK, thanks, it almost works !!
I've just a problem. 2 tabs are opening.
One is opening correctly and displays my report. I can display it in PDF/HTML.
But another tab is opening with this message : This window can now be closed since the application has been launched in a separate window. Note: Popup blockers may prevent this application from working properly.
Do you know why this tab is opening ?
Thanks very much for your help.
Virgile.

SSL problem: SSL Forbidden or 12204 SSL port specified is not allowed

Hello there,
we have a BIG PROBLEM on a production system.
Some user on internet using IEXplore 5.0x could'nt access our https page.
Error reported are:
SSL Forbidden
SSL port specified is not allowed
We are using SSL on port 7002
This is the weblogic properties reagrd SSL:.
weblogic.security.ssl.enable=true
# SSL listen port
weblogic.system.SSLListenPort=7002
Any suggestion?
Is there a possibility to use port 80 both for https and http?
Any help will be apprciated.
THANK'S!

I think you need to setup your proxy server to allow 7002 port,
or use port 443 for SSL ( it is the default proxy secured port)
Hope this will help
Mohds
"Paul Patrick" <[email protected]> wrote:
If this is a production problem, you should file a problem report with BEA
Support.
But I didn't see any certificates for the server registered. Without
certificates and a private
key the SSL protocol will not work.
Paul Patrick
"Antimo" <[email protected]> wrote in message
news:3a12cc80$[email protected]..
Hello there,
we have a BIG PROBLEM on a production system.
Some user on internet using IEXplore 5.0x could'nt access our https page.
Error reported are:
SSL Forbidden
SSL port specified is not allowed
We are using SSL on port 7002
This is the weblogic properties reagrd SSL:.
weblogic.security.ssl.enable=true
# SSL listen port
weblogic.system.SSLListenPort=7002
Any suggestion?
Is there a possibility to use port 80 both for https and http?
Any help will be apprciated.
THANK'S!

Wireless-N Gigabit Router ports wont open?? NEED HELP

I upgraded my linksys WRT54GX to a linksys Wireless-N Gigabit Router with Storage Link and now when I open ports or specify my ip under a DMZ, my ports are still being blocked. Im trying to open a few ports for my applications but when i test them.. it fails, ive turned off my MCaffee firewall opened the ports and even put my static ip and enabled DMZ and it still shows my ports as not going through. I would appreciate any help.

I have updated to the most recent firmware. I had a few technicians setting up a crestron Audiorequest server in my houes and for the equiptment to work properly they needed to open up about 5-6 ports. I could see they were having problems while forwarding the ports on the N router. They told me even though the ports were open, they were still being blocked by the routers firewall. I had to set up my old WRT54GX modem and now the ports are benig accepted. I now have a 250 dollar router sitting on my floor because it is not working properly. Any suggestions?

How do I make URLs appear when FF opens @ a site?

In the address/URL bar, when I open any desktop link/shortcut or open a website link in to a new window, or tab, there is no address showing. I have to be at the website, then click any internal link, and the URL appears.
Process:
FF is default browser.
I have shortcuts on the desktop (example: http://www.bing.com) or another (example anyplace.com).
FF is set to start at bing.com. When opening FF, it opens Bing.com, but there is only "Search or enter address" in the URL.- not the url FF is at.
Same thing with any link - pages have to URL in the address bar.
I keep FF updated.
Thanks for all the support everyone is so kind to offer,
Intertnaut

'''Try the Firefox SafeMode''' to see how it works there. 
''A troubleshooting mode, which disables most Add-ons.'' 
[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode#w_safe-mode-window_2 Troubleshoot Firefox issues using Firefox SafeMode]
When in Safe Mode... 
* The status of plug-ins is not affected.
* Custom preferences are not affected.
* All extensions are disabled.
* The default theme is used, without a persona.
* userChrome.css and userContent.css are ignored.
* The default toolbar layout is used.
* The JIT Javascript compiler is disabled.
* Hardware acceleration is disabled.
* You can open the Firefox 15.0+ SafeMode by holding the '''Shft''' key when you use the Firefox desktop or Start menu shortcut.
* Or use the Help menu item, click on '''Restart with Add-ons Disabled...''' while Firefox is running.
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before using the Firefox shortcut (without the Shft key) to open it again.''
'''''If it is good in the Firefox SafeMode''''', your problem is probably caused by an extension, and you need to figure out which one. 
http://support.mozilla.com/en-US/kb/troubleshooting+extensions+and+themes 
Or it might be caused by Hardware Acceleration.
''When you figure out what is causing that, please let us know. It might help other user's who have that problem.''

Cannot Tnsping, Telnet to DB on Linux 3 Sever - Ports not open

I have installed 10g DB server on Linux 3. The DB is running properly. However when I do a TNSPING/Telnet from a windows client I am unable to connect. I can ping the server from the client and vice versa.
The following are the results:
sqlnet.ora file on the client:
# sqlnet.ora Network Configuration File: C:\oracle\product\10.1.0\db\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
tnsnames.ora file on the client:
# tnsnames.ora Network Configuration File: C:\oracle\product\10.1.0\db\network\admin\tnsnames.ora
# Generated by Oracle configuration tools.
infr2 =
(description =
(address_list = (address = (protocol = tcp)(host = 192.168.0.102)(port = 1521)))
(connect_data = (sid = infr2)))
# (DESCRIPTION =
# (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.0.102)(PORT = 1521))
# (CONNECT_DATA =
# (SERVER = DEDICATED)
# (SERVICE_NAME = infr2)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
LISTENER is running on the server.
PING RESULTS FROM SERVER TO CLIENT: Successful
[root@infr2 etc]#ping 192.168.0.100
PING 192.168.0.100 (192.168.0.100) 56(84) bytes of data.
64 bytes from 192.168.0.100: icmp_seq=0 tt1=128 time=0.279ms
6 packets transmitted, 6 recieved, 0% packet loss, time 5013ms
PING RESULTS FROM CLIENT TO SERVER - Successful
C:\Documents and Settings\natik>ping 192.168.0.102
Pinging 192.168.0.102 with 32 bytes of data:
Reply from 192.168.0.102: bytes=32 time<1ms TTL=64
Reply from 192.168.0.102: bytes=32 time<1ms TTL=64
Reply from 192.168.0.102: bytes=32 time<1ms TTL=64
Reply from 192.168.0.102: bytes=32 time<1ms TTL=64
Ping statistics for 192.168.0.102:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
TNSPING Result â Fail
C:\Documents and Settings\natik>tnsping infr2
TNS Ping Utility for 32-bit Windows: Version 10.1.0.2.0 - Production on 07-NOV-2
004 10:18:42
Copyright Â© 1997, 2003, Oracle. All rights reserved.
Used parameter files:
C:\oracle\product\10.1.0\db\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (description = (address_list = (address = (protocol = tcp)
(host = 192.168.0.102)(port = 1521))) (connect_data = (sid = infr2)))
TNS-12560: TNSprotocol adapter error
Telnet result - Fail
On Telneting to see if the port is open I get:
C:\WINDOWS\system32>telnet infr2.localdomain.com 1521
Connecting To infr2.localdomain.com...Could not open connection to the host, on port 1521: Connect failed
I have flushed the rules from the iptables. There are no rules set right now, but still getting failure.
The TNSPING and TELNET is not getting through any ideas. Seems like that the port 1521 is blocked. How do I open it.?
Thanks.

Is there a firewall between client and server? Unfortunately you don't tell us , which Windows version you are using. If it is Windows XP SP2 , by default Windows integrated firewall is activated. But this shouldn't be a problem in your case, because you are using Windows as a client.

How to check weather a remote port is open or closed by a firewall

Hi,
Need to check weather a remote port is open or closed by a firewall. can i use Java Socket class to do that?
Is there any proper way?

In general, there is no way to determine anything about the status of a firewall from the outside (unless you know one is running and you want to verify it's functioning correctly).
When trying to connect to a socket, you might get a time-out, which means either the firewall is silently dropping packets or the server is down or too busy or that there is a network problem. Or your connection might be refused, which means either the firewall has denied your request or the server isn't listening on the port you specified.
In most cases, you should only be interested in successful connections and not try to guess too much as to the cause of unsuccessful ones.

IPs, URLs, or Ports to open to allow Flash updates?

Similar Messages

Maybe you are looking for