ISP, firewall, router blocking ports?

About a week ago most of my online games started having trouble connecting to the internet. They cannot detect the internet when I know for a fact I'm online. I do not use my windows xp firewall and I can't find the firewall tab in my router via IE. I'm using the BEFW11S4 v4 wireless router. Diablo II, Gunbound, and even Ad Aware can't locate the internet, probably along with many other programs.

Well try upgrading the firmware of the router & keep on holding tightly
the reset button in such a way that power light is blinking on the
router & then do a complete network power cycle i.e., unplug the power
cables from the modem & from the router & then plug in the power cable
to the modem first once all the lights are solid green you could plug
in the power cable to the router & check out it will definately work!!

Similar Messages

Cannot sync; receiving a message that firewall is blocking port 3689

I am receiving an error message when I try to sync my Apple TV. The error message says that a firewall is blocking port 3689. I have checked the settings I can find, but have been unable to find the source of the problem. Has anyone had this problem and if so, how did you resolve this?

Thanks Chenks! At least I know I'm not nuts. I have done exactly what you suggest. Itunes is in the list and I went the extra step and added port 3689. Still no luck. I've checked my McAfee settings and anything else I can find. I am at the point of resetting everything to the defaults to see if I can get around this. This is so odd as the Apple TV has been working beautifully, then, BAM! An error code and I can't synce.

Blocked Port? Mailboxes?

hey all, I'm trying to setup my website email in Mail. It downloads all the mail just fine, but I cannot send email out. I realize after combing these forums that it's quite likely that my ISP (Comcast) has blocked Port 25. BUT, I use Entourage to download my Yahoo email and it sends/receives mail just fine. So I'm wondering what the deal is, cause if the Port 25 was blocked, wouldn't I have the same troubles with my Yahoo account in Entourage sending mail?
Also, is it possible to have each individual account you have setup in Mail (i.e. .Mac, Yahoo, etc) to have the incoming messages come into it's own mailbox? Instead of it being a free-for-all in the inbox?
Any and all help is greatly appreciated. Thanks!
Powerbook G4 Mac OS X (10.4.5)

This drove us CRAZY around here for several months. I knew it was the port 587 thing but couldn't come up with the info to fix it. We ended up adding port 587 to the mail server along with port 25. This info was in a response to my posting back on Nov 3. Here's the info member William Lloyd sent me. It worked perfectly.
Michael,
First, this is the Xserve forum -- there is a separate forum under OS X Server for the Mail Server -- I'd suggest you post in the appropriate location.
Second, if you have enterprise support from AppleCare, they can probably help with this. The AppleCare Select agreement starts at $7999/year, I think. If you call the consumer line, it's unlikely you'll get assistance with this.
Finally, you can enable Postfix to accept mail on a port other than 25, to get around the "ISP blocks port 25 due to spam concerns" issue. It's a simple modification to the master.cf file.
Here's what it would look like, if you wanted to also enable port 587:
To add a second listening port on 587, edit master.cf like this:
You should be able to just add another port that postfix listens on. Leave the port 25 stuff in there, and add a second port for smtpd.
So as root, edit the file /private/etc/postfix/master.cf, so it looks something like the following, assuming port 587 for the purposes here. You'd want to pick a port that didn't have a conflict with another service, and it should be above 1000 (below 1000 is only accessible to root).
# =====================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# =====================================================================
smtp inet n - n - - smtpd
587 inet n - n - - smtpd
Do a little Google digging for more info.

How can I use Back to my Mac when my ISP blocks port 1900?

I was just forced to switch ISPs (don't ask...) and it turns out that my new ISP (Astound) lied to me and actually does block port 1900, which means that Back to my Mac (on which I rely) does not work.
Has anyone seen this and found a viable workaround? Preferably one that is easy for my non-technical family to use also, but all suggestions are welcome.
Thank you!

So, I convinced my ISP to open port 1900 and they did, but it's still not working.
I get two messages that make no sense to me, but I hope indicated something that someone here can help me undertstand...
When I open the iCloud preference pane in System Preferences, It says just below the Back to my Mac setting "Configure Router for better performance" - My Airport Extreme is configured with Back to my Mac and it looks like my account shows a green indicator.
Second, next to the Back to my Mac setting in the iCloud preference pane, there is a button labeled "Details..." When I click that it tells me that "Back to my Mac is not working properly because the DNS server isnt' responding" and suggests I contact my ISP for a different DNS server.
All other internet services - including iCloud services - are working fine. I even tried changing my DNS servers to Google's public DNS servers and nothing changed.
Any suggestions are very much appreciated! Thank you!

BT HH 2.0 - Blocking Ports / Firewall

Is there a way to block all ports except http / smtp? or are there other firewall settings that can be accessed apart from the 3 choices in the configuration.
Thanks - Gary

gpmcclean wrote:
Thanks for the reply Tommy and the welcome.
My goal is to block all possible P2P ports as my daughters are eating away at my 40GB allowance far to quickly.
I have a Netgear DGN2000 which I used with Plus.net before I moved to BT Infinity back in Oct.
Cheers - Gary
Then you need to block all the port venues that their P2P Applications are capable of using perhaps even legitmatate ports that you use for you own needs?
A far better solution is to be firm but fair when dealing with their Internet access, it requires more discussion & time but it is usually a far better long term option with less friction.
On a slight diversion, blocking ports may only a short term solution anyway, is your router properly IPV6 aware. (very few are )
Take al look at these links.
IANA, ARIN, and the IPv4 run-out
The .net domain joins the DNSSEC fold
The exaustion IPV4 addresses & the expected signing of the .com domain to DNSSEC early next year should make 2011 an interesting one.
"I have this awful feeling someone is watching every move I make (one of my pet hates is router location tagging)." Marvin (A paranoid Android)

My router is blocking ports on PS3 - Bad Company - Can't Create Squads. WRT160Nv3

Hey Guys,
I have read every where that the best thing to do is "dmz" my router or something of that nature. I'm a complete noobie when it comes to this sort of thing. I don't know how to assign a Static IP. I don't know if this means I have to call my ISP too assign me a Static IP or if I just have to assign an IP to my PlayStation and then Add that IP too the Router? Ugh, I'm just lost when It comes to this stuff. I need a simple BreakDown. If anyone can give me one.?.
I get a NAT - 2 connetion. 97% Signal Strength. 14 MB up 1 MB Down. The only thing I can't do *that I know of so far* is create my own squad in Bad company, People just get an error. I can join squads, at least certain squads. I assume the squads I can't join are ones that are on routers and have the same problem as myself.
I assume that this is because ports are being blocked by the router. I asked the guy who installed my internet if they Blocked ports and he said they don't block ports. So I assume it's the router. Can anyone help me Unblock the ports on my router.....like " Unblocking your ports for dummies "
Thanks in advance.

Follow this link and it will provide you all the information how to assign a Static IP on your PS3 as well as how to open the Ports for your PS3 on your Router.

The access to our new chess hall may be blocked by your local firewall. You would need to reconfigure your firewall to open port 15010 for TCP traffic.

How do I do the following so I can get into my chess program??
The access to our new chess hall may be blocked by your
local firewall. You would need to reconfigure your firewall to open port 15010
for TCP traffic.

This is not really Firefox related.
What you need to do here is to read the firewall manual which usually explains how to create a rule for what you want to do.
If you're using the Windows XP firewall, see this Microsoft article: http://windows.microsoft.com/en-US/windows-vista/Firewall-frequently-asked-questions

Does Verizon FiOS block Port 5900?

Okay, so I've got a computer with absolutely no ports blocked, I've shut off the firewall, the thing is behind a router, but set as DMZ. I still can't control/observe. I can use every other feature of ARD except control/observe, and screen sharing. I've confirmed that port 5900 is not responding on the computer in question, despite the above extreme trouble-shooting measures. The computer in question is not on my local network, it's in another state with Verizon FiOS internet. Does Verizon block port 5900, or should I suspect there is something else going on with the router or ARD?
If port 5900 is being blocked by the ISP, can I use router/ARD magic to change what port actually gets used, while still making ARD happy?
I'm kind of going crazy here...

Welcome to the Discussions,
You will have to check with Verizon to see if they pass port 5900 or not. I suspect that may be the case.
While I can't tell you how to change the port, I can tell you that many administrators use port 80 tools like gotoassist.com or logmein.com for system on networks out of their control. Of course you won't be using ARD, but it is much easier than changing the default port settings on every machine.

Firewall is blocking SSH when it shouldn't be

I had a [problem with SSH|http://discussions.apple.com/thread.jspa?threadID=1990417&tstart=0] on my iMac not long ago where SSH was being blocked by the Leopard firewall, even though it is configured to allow it through. I have the firewall configured as "Set access for specific services and applications" and "Remote Login (SSH)" appears on the list automatically since Remote Login is enabled on the Sharing tab of System Prefs.
The first time I had the problem I solved the problem by turning off the Leopard firewall ("allow all incoming") and then turning it back on again (in "specific services" mode). I thought it was just a one time glitch being the first time I'd ever tried getting SSH to work. After that it worked great until restarting my iMac yesterday when the firewall started blocking SSH again. Once again, turning off the firewall and then turning it back on again resolved the problem.
Any ideas? Anyone had similar problems?

Most routers thesedays even consumer routers have a stateful packet inspection firewall and also NAT.
With NAT unless you specifically open ports from the router to your mac then the outside world cannot access any of the services on your mac.
If you want to use SSH from the outside world then you would have to portforward tcp port 22 from the router to your mac. But this is not a problem if you use a strong password eg not a dictionary word or name or better still you can turn off password authentication in your ssh configuration and use public key access only.
So if you have not opened up ports on the router then your application firewall is only preventing access from other computers on your local network.
Call me paranoid, but I don't know anything about how solid the router firewall is, whereas I have much more confidence in the OS X firewall.
If you are savvy enough to know about and how to use SSH then it should be really easy for you to find out how good your router's firewall is. Understanding a router's web interface is far less demanding than learning how to use SSH.
In most cases you simply put the router's IP address into your web browser and you can see all of its services.
But something you should be aware of it is not really incoming connections you should be concerned about. It is outgoing connections that require more control.
For example if you were socially engineered by a website or elsewhere and they convinced you to install a trojan or spyware on your mac then your Mac's Application firewall would not stop these processes dialing out.
Little Snitch from obdev is an application aware firewall that controls your outgoing connections and is far more useful than the mac's application firewall on a desktop computer behind a router.
Apart from that, I'd really like to understand what's going on!
Did you try nerowolfe's suggestion of creating a test user account and login in as that user and see if the problem is still there?

Verizon blocks ports?

I have DSL & Actiontec GT704-WG. I opened a port to host online game, but when I use a port scanner found here: http://www.canyouseeme.org/
It tells me my port is closed even though I forwarded everything correctly. Does verizon block any ports besides 80? I only use windows firewall so i know its not a firewall problem. Anyone with same router can help me?
Thanks
heres a snapshot of my router
http://i45.tinypic.com/105edd5.jpg

Verizon itself doesn't block ports at the head end besides port 25 for smtp outgoing email. they basically don't let spammers bounce messages off their smtp servers to send emails.   Port 80 is questionably blocked by region - I have seen a lot of users in the forums that have port 80 unblocked. and then sporadically a user forum member will say its blocked but most people say its unblocked now. VZ made that decision middle of last year.
The router that verizon provides has a firewall and like all firewalls it blocks a BUNCH of stuff. that's what firewalls do. it's kinda their gig.
If you port forward, try to use portforward.com for a good guide.
Basically this is stuff you probably know, but I'll recap just in case.
Set your pc to have it's own IP address   - you'll configure that on your PC nic settings under tcpip v4
then go into the router, and open the proper ports. I don't know what ports your game wants, but make sure the source port is set to any, and do not specify a number in that section.
make sure its pointed to the IP you gave your PC, and apply the changes and try again.
if that doesn't work there may be one or two users here that will pop up that may have additional info, but you can also reach out on the portforward.com forums and see if you can get some answers there,   DSL Tech support won't help with any port forward configurations. they consider it advanced and out of their boundaries.

Confussion: DNS/FQDN behind SOHO Firewall/Router

Hi Everyone,
I'm a little confused as to the setup of DNS behind a Firewall/Router.
I have previous had an OS X 10.6 server with DNS setup directly to a Global IP.
In my new setup, I will have a SOHO Firewall/Router setup at the "edge" with server & clients on the Local LAN. I will need the server to be able to serve up DNS / Open Directory master / Web Services / etc. both publically and privately. The SOHO device will serve up DHCP.
Port Forwarding on the SOHO router is not an issue, so covered there.
I am a bit confused on what to do on the DNS side as it is now sitting on private lan but needs to serve out publically as well.
Is it as simple has having something like the following in the DNS tables?
Note: dns1.mycompany.com. would have static IP: 192.168.1.10
dns1.mycompany.com. IN A 123.123.123.123
dns1.mycompany.com. IN A 192.168.1.10
10.1.168.192.in-addr.arpa. IN PTR dns1.mycompany.com.
123.123.123.123.in-addr.arpa. IN PRT dns1.mycompany.com.
That way there is a machine record and reverse lookup for both internally and externally?
Message was edited by: Jin597

I am not saying the following is the only way to do it, but typically you would run your own DNS server internally and may have for example www.yourcompany.com resolve to a local private IP address, and externally you would have your ISP run a DNS server for the same domain but it would resolve to your public IP address.
The outside world would only see and use the ISPs version and would therefore always use the (correct) public IP address, and your users on the LAN would use your internal DNS server and hence the private IP address.
It would be possible to do the same all yourself by having two separate DNS servers internally but keeping one for use by your LAN, and the other for use (only) by external users. I don't believe the standard Apple Server Manager utility makes it possible to properly do both on one server.

Web Server Blocks Port 80 - What am I to Do?

I have a WebSite that will load up locally, but not remotely. I think it's because the web server is blocking port 80. How do I get around this (port forwarding - how do you do it)?

There are a few ways to do this... This is what I do, personally... This is sketchy, but you can figure it out with some research and lots of googling!
1. Set the machine that will be the server to use a static internal network address. I use 192.168.2.100. This is the internal, non-routable IP address of the machine on your network. This is not the IP that your modem/router receives from your internet provider.
2. Open an external port on the router that is not blocked by your ISP. I use port 5100. Then configure the router to listen on external port 5100, and pass all "port 5100" traffic to 192.168.2.100 and port 80. By doing it this way, I avoid having to edit the apache configuration. Apache listens to port 80 by default. Apache does not realize that the traffic originally entered the network on port 5100.
3. If your external IP address is dynamic, you will want to start googling "dyndns". It is a free service that will let you "register" a domain name. In my case, my router notifies DynDns automatically whenever it gets a new IP from the provider. This way, I don't have to remember my IP address, which changes anyway... I just remember my domain name. I can use any network service, such as SSH, Apache, ftp, etc....
Good luck!

Blocked port 80?

hello, i dont know is im in right topic.
we have astaro SG 110/120
we have 2 servers
1.AD/DNS/DHCP win serv 2003
2.MSQL/files/programs serv 2003
the main problem is that on 1 server is blocked port 80.
cmd>ping google.com <this working fine there is connection
but when i want to connect by browser to google.com by IE there is no answer
i cant log in to astaro too by 192.168.1.1:4444
i cant upgrade antivirsu virusbase becouse as support guy told me this connection is on 80 port.
mby its not a 80 port only cos i cant even get to router by :4444 port

On Wed, 23 Apr 2014 07:07:57 +0000, endriucontec wrote:
hello, i dont know is im in right topic.
we have astaro SG 110/120
we have 2 servers
1.AD/DNS/DHCP win serv 2003
2.MSQL/files/programs serv 2003
the main problem is that on 1 server is blocked port 80.
cmd>ping google.com <this working fine there is connection
but when i want to connect by browser to google.com by IE there is no answer
i cant log in to astaro too by 192.168.1.1:4444
i cant upgrade antivirsu virusbase becouse as support guy told me this connection is on 80 port.
mby its not a 80 port only cos i cant even get to router by :4444 port
This is not a Windows Server issue, it is an issue with your firewall
configuration. You'll need to contact Astaro for support.
Paul Adare - FIM CM MVP
On two occasions I have been asked [by members of Parliament], 'Pray, Mr.
Babbage, if you put into the machine wrong figures, will the right answers
come out?' I am not able rightly to apprehend the kind of confusion of
ideas
that could provoke such a question. -- Charles Babbage

Mail Server when Comcast blocks port 25

I want to host a mail server, and am able to get mail to send, but am unable to receive mail. I tried sending an email from my gmail, and it gets delayed because it can't connect to xxx.xxx.xxx.xxx:25. I then found out that Comcast blocks port 25. Is there a way to change what port the server app uses so it can receive mail?

This is a common question; you're not the first person to have considered resetting the SMTP TCP port.
As Strontium90 indicates, you can most certainly set up your own global mail infrastructure on a variant port (possibly even by using DNS SRV records to find the port de jour), but by the time that's all coded and debugged and generally accepted and standardized and in widespread use around the planet, Comcast and the other ISPs will probably just detect and block the new port or the new service on their residential service tiers. Which means you'll need to add TLS encryption and potentially random ports, and down the proverbial rabbit hole we go.
But seriously, the usual and preferred and best approach is a business class service, as that has port access and you can get correct DNS. Without correct forward and reverse DNS translations, many other SMTP mail servers will detect a dynamic IP service as a spam engine, and drop outbound mail as it arrives. Some mail servers will detect this and will also drop inbound mail, as well.
As an alternative to a business-class service, you can set up a mail relay through your ISP, or potentially a relay via a commercial mail relay service — if either of these approaches is permitted by your ISP terms of service. There are various folks that offer these mail hop services by subscription, but then all your mail is routed through that service and that may or may not be desirable.
Hosting your own virtual private server or dedicated host just for mail can be pretty cheap these days, if you're willing to run your mail server in a data center. That avoids all entanglements with your ISP. (But again, if you're willing to host your mail elsewhere.)

Local router blocking incoming remote assistance request

I have a user who recently moved. they received new equipment from their ISP. I use to be able to make remote assistance connections to their computer using a popular system center configuration manager remote tool. Now i can't get past the handshake when i try to connect. If he has split tunneling enabled would the new router block incoming traffic? I know by default most of the router's firewall will block all incoming traffic (if enabled). does this apply to VPN traffic?

Hi, if the VPN terminates on an IOS router, then the split tunneling does not "block" anything. It simply decides which traffic is sent through the tunnel and which traffic is sent in clear text (as in Internet traffic).
If the router has ACLs on the outside interface, that could be blocking the traffic (even VPN traffic).
Make sure the desired traffic is part of the split tunneling rule and that if there's an ACL, it allows the traffic to pass.

ISP, firewall, router blocking ports?

Similar Messages

Maybe you are looking for