Open Port 80, 16384-16482, and 5060-5061
How do I open ports 80, 16384-16482, and 5060-5061 and forward them to more than one IP address and still keep my network secure?
I have2 VOIP phones that I would like to get working. I can get the one working by using Port Forwarding and forwarding all these ports to its private ip address. However I believe I need to duplicate this for my second VOIP phone but you can't have the same port forwarded to different ip addresses under Port Forwarding.
I have a WRT54GS.
Thank you,
Brandon
Message Edited by 2fast4u on 02-20-2009 07:01 PM
For your 2nd VOIP phone i think you can Do is Port Triggering or you can use DMZ for your 2nd VOIP as your VOIP phone will have a Static IP.
Similar Messages
-
Opening Ports on Airport Express for GTA IV
I am told that to play Grand Theft Auto 4 (GTA 4) properly, I need to "open ports" on my router and enable UPnP (Universal Plug-n-Play).
The ports I am supposed to open are:
UDP
3478
3479
6672
28900
TCP
80
443
5223
3478
3479
3480
8001
8080
27900
On my Windows 2000 machine, using the AirPort Admin Utility, when I configure the AirPort, I get a window that has a "port mapping" tab.
Is this how I open the ports listed above? If so, it asks for a private IP address, Public Port, and Private port. How do all these relate to the port numbers above?
In the configure base station window, i can't find any mention of how to enable UPnP
Thanks!!!!!
PS, don't hate on me for having a PC, i'm just waiting until Apple comes out with a BluRay capable laptop...
Message was edited by: Psychos40Hello Psychos40. Welcome to the Apple Discussions!
On my Windows 2000 machine, using the AirPort Admin Utility, when I configure the AirPort, I get a window that has a "port mapping" tab.
Is this how I open the ports listed above? If so, it asks for a private IP address, Public Port, and Private port. How do all these relate to the port numbers above?
Yes.
To setup Port Mapping:
Assign a manual IP to the host device
The "host" device is the computer that will be hosting GTA and needs to be accessed from the Internet. Under Windows 2000, you would use Network Settings to assign a static IP address to this computer. Note: Be sure to assign an IP address outside of the DHCP range provided by the AirPort Express Base Station (AX) default range of 10.0.1.2 - 10.0.1.200, like 10.0.1.201
To setup port mapping on an AirPort Express Base Station (AX), connect to the AX's wireless network, and then use the AirPort Admin Utility to change these settings:
Port Mapping tab
o Click "Add"
o Public Port: <enter the Port # which will be accessed from the Internet>
o Private Address: <enter the static IP address from above>
o Private Port: <either enter the same value as the Public port or the value you want your application/service to answer on>
o Click "Ok"
o Repeat the last series of steps for each port you wish to map.
In the configure base station window, i can't find any mention of how to enable UPnP
Unfortunately, that's because the AirPorts do not support UPnP. Instead, the AirPorts have a similar feature known as "NAT Port Mapping Protocol." You enable/disable this function on the Ethernet Port Security tab under Base Station Option within the AirPort Admin Utility. Note: Although NPmP is similar, it is not the same as UPnP and may not offer the same features. If GTA requires UPnP, the AirPort's NPmP feature may not support it. -
DPC3825 / CAN OPEN PORT 3306 BUT NOT OTHERS
I am trying to open port 80, 3306, 30000, and 30001 .... I did everything properly, I have a static IP address, I am hooked directly to my cisco router, but when I go to this website http://www.whatsmyip.org/port-scanner/ and scan to see if my ports are open, only port 3306 shows that is open, all the other ports time out... Please help me.
Hi Bertrude,
The DPC3825 is an internet service provider (ISP) supported product. You will need to contact them or your technology reseller from where you purchased the device to assist you with your question. -
How can I set up a WD My Cloud with my Airport Extreme - I can't get it to open ports 80 and 443?
For remote internet access to the WD My Cloud Mirror, I have been advised that ports 80 and 443 must be open in order to reach the WDMyCloudMirror. My Motorola Gateway (Surfboard SB6141) is connected directly to my Airport Extreme (WAN port) which is in turn connected to the WDMyCloudMirror (all by ethernet cables). I do not have FULL instructions on how to properly manually configure the Airport Extreme to open the ports. I have tried an earlier posting which provides many of the steps, but not all of the required information is included (how to determinge the IP address to be assigned, etc.). I did the best I could with the information given, but the test using "YouGetSignal" showed the ports as still closed and attemps to reach the WDMyCloudMirror by the internet failed as well (of course). The WDMyCloudMirror has enough Apple "stuff" included in it (software, I suspect) that an Apple legal acceptance is required for its set-up, yet Western Digital Tecnical Support is unable (or unwilling?) to help with this aspect of its configuration required to work within the Airport Extreme environment. I have returned the WD My Cloud Mirror to Amazon as "not able to work", but I have not given up the hope that I can eventually get the ports open so that I can get this cloud device, or one similar, to permit remote internet access.
Port Forwarding.....or Port Mapping....as Apple calls it is a difficult and complex configuration method for most users. Because there are so many variables involved in this type of setup, it is not possible to provide a step by step guide that will work for everyone with all devices.
It is possible that a setup guide exists for the the WD drive and AirPort Extreme, but you will have to go looking for it on the Internet. Even if you find one, it may not be tailored to your specific situation or needs.
Sometimes, you can do everything right....at least according to someone's article or "how to" guide, and things still will not work correctly.
In situations like this, when you really don't know what to do, you need to enlist the aid of an IT pro, who will know what to do based on your particular products and unique circumstances. Sometimes....they won't be able to get things working either due to particular circumstances.
But, before you do this, I would strongly recommend that you use a Static IP address for your Internet connection with your ISP. If you do not have this now, contact them to ask them if they offer this type of connection. Expect to pay more for this type of service, of course. -
I have an airport extreme and I am trying to play a new game on my xbox one and it keeps kicking me I have comcast internet that is more than fast enough so I went to the games site and it says I need to either create a static ip or to open ports no idea how to do either of these or what that does any help would be appreciated.
There are heaps of posts here about how to open ports on apple routers specifically for xboxes.
AirPort Extreme and xbox 360 -
Firewall in 10.5, how to open ports and how to manage?
I am pulling my hair out with the new firewall in 10.5. In 10.4 I could just set ports as I liked in the control panel, in 10.5 there is no such thing.
I need to for example open port 49999 to allow PageSender to function in my network.
I need to open port 5901 to work with JollyFast VNC, as port 5900 is used by Apple Remote Desktop and the conflict if they both use the same port.
Some of these ports I need permanent open like 59999 and others for one session and than close again, like 5901. Again in 10.4 I made the rule in the pref pane, ticked the box and Bob was your uncle. Now?
I would like to be able to see what ports are open and active on the machine. I have no idea as to where I could see this.
And at the same time I would like to keep the firewall as closed as possible as I am often on line in hotels etc.
So I need help, is there a manual somewhere someone is aware of? Or do you have any answers?The new Application Firewall does not work in the same way as IPFW (the main firewall in 10.4).
Instead of managing ports, it simply controls the access of applications to any port. Thus, if you want PageSender to receive connections, you simply need to switch the firewall to "Set access for specific services and applications", and then add PageSender to the list, with "Allow incoming connections". When you do this, PageSender will be able to receive connections on any port that it needs to.
If you don't like this method of controlling connections, you can still use IPFW. Apple has removed the GUI, but you can download a GUI application like [NoobProof|http://www.hanynet.com/noobproof> or [WaterRoof|http://www.hanynet.com/waterroof/index.html], and you can then set access for specific ports.
There are no problems with using both IPFW and Application Firewall.
Cheers,
Rodney -
I recently had a security system installed in my house. One of the features is an EPAD which enables me to have a virtual keypad on my iphone, and computer to operate the alarm system. The technician was not familiar with Mac's and Airports. How do I open port 80 to 80 in my airport and assign a fixed IP address for the EPAD? Apparently this is what is needed to make this work.
There are three ranges of "strictly local" IP addresses reserved for local Network use:
192.168.xxx.yyy
172.16.xxx.yyy
10.xxx.yyy.zzz
What your Router does for you is to act as your agent on the Internet.Your requests are packaged up and forwarded on your behalf, and only when a response is expected is the response returned to your local IP address.
Directing Network Traffic to a Specific Computer on Your
Network (Port Mapping)
AirPort Extreme uses Network Address Translation (NAT) to share a single IP address with the computers that join the AirPort Extreme network. To provide Internet access to several computers with one IP address, NAT assigns private IP addresses to each computer on the AirPort Extreme network, and then matches these addresses with port numbers. The wireless device creates a port-to-private IP address table entry when a computer on your AirPort (private) network sends a request for information to the Internet.
If you’re using a web, AppleShare, or FTP server on your AirPort Extreme network, other computers initiate communication with your server. Because the Apple wireless device has no table entries for these requests, it has no way of directing the information to the appropriate computer on your AirPort network.
To ensure that requests are properly routed to your web, AppleShare, or FTP server, you need to establish a permanent IP address for your server and provide inbound port mapping information to your Apple wireless device.
To set up inbound port mapping:
1) Open AirPort Utility, select your wireless device, and then choose Base Station > Manual Setup, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2) Click the Advanced button, and then click Port Mapping.
3) Click the Add button and choose a service, such as Personal File Sharing, from the Service pop-up menu. -
I have a Lorex DVR that I want to monitor from my IPhone and IPad. I used to be able to do this when I had a Belkin router (easy to open ports) but I bought the AirPort Extreme router and no longer have that capability. When I use "canyouseeme" they can NOT see 80, 9000 or 1025. Lorex says I need them all available in order to access. Help! And all the help I see refers to a earlier version of the AirPort Utility so I cant use those to look at anything, I cant find the same screens, I have version 6.1 (610.31). I also don't really understand how ports work, so I need a pretty basic explanation.
Well...I went to the modem (Westell, WireSpeed), found the NAT settings, once again, I'm WAY over my head, I am assuming this is a TCP connection (as opposed to a UDP) and per Lorex my mobile devices will use port 1025. So I gave it a "global port range" of 1-10 and I indicated that the "base host port" was 80, 1025, & 9000 (ports 1,2,3). When I selected the 'enable' it asked for a "host devise" my choices are my IPhone, IMac and the IP address for the dvr, so I choose the dvr. I still cannot connect and canyouseeme still can NOT find these open ports. This is taking up my whole day! I don't know how people figure this stuff out.
-
Can't update iOS 8 on my iPhone5 through iTunes on Windows 8 (error 3004, 3194). Updated host file, opened port 80, 443; turned off security system and firewall, etc. But nothing works. How to solve this problem?
Hi the_mad_movies,
It seems like this article will be the best option for addressing this issue:
Error 3194, Error 17, or "This device isn't eligible for the requested build"
http://support.apple.com/kb/ts4451
Thanks for coming to the Apple Support Communities!
Cheers,
Braden -
Monitoring open ports and IP adresses on Windows clients
I'm using SCOM 2012 for monitoring system.
I cannot find how to monitor open ports (TCP, UDP) and IP addresses on Windows based PCs. I need that kind of report for Internal auditors and Security officer.
Is it possible to get Windows Firewall State, collect it in SCOM and prepare report on monthly base?
tnx in advanceI have found a possibility to do this. Hope you understand this and it is helpful. This is a two step process but guess will definitely server the purpose.
Scope: We will be running a tool which will monitor a port (TCP or UDP) for a specific host / IP and will throw a log file.
SCOM will monitor the log file and will throw a alert if the log file contains the string NOT LISTENING (Port not working or unable to open the port) which the program will create the log with the results.
First download the program named: PortQry Command Line Port Scanner Version 2.0 from microsoft using the below link. It is a command line tool.
http://www.microsoft.com/en-in/download/details.aspx?id=17148
Run it using by making a batch file or powershell script using task scheduler as per your time requirement (Every 5 min or 1Hr).
Use this command to monitor a ip / hostname and its port with TCP or UDP.
I have pasted the command file of the program in C:\Port_checker directory so i am using the below syntax
C:\Port_checker\PortQry.exe -N 192.168.1.1 -e 5723 -p UDP -l C:\Port_checker\Result.log /y
-N = Hostname / FQDN of agent or Ip address
-E = Port # what you want to monitor
-P = Protocol (TCP or UDP)
-L = Generate log on the following location and name
/Y = To replace the existing log file name to fresh one without prompt.
The result in the log file will be as follows:
============================
For successful port open:
PortQry Version 2.0 Log File
System Date: Tue Oct 07 09:42:32 2014
Command run:
C:\PortQryV2\PortQry.exe -N 192.168.1.1 -e 5723 -p UDP -l C:\Portqryv2\Result.log /y
Local computer name:
192.168.1.2
Querying target system called:
192.168.1.1
Attempting to resolve name to IP address...
Name resolved to 192.168.1.1
querying...
UDP port 5723 (unknown service): LISTENING
========= end of log file =========
PortQry developed by Tim Rains
For failure port open:
PortQry Version 2.0 Log File
System Date: Tue Oct 07 09:42:32 2014
Command run:
C:\PortQryV2\PortQry.exe -N 192.168.1.1 -e 5723 -p UDP -l C:\Portqryv2\Result.log /y
Local computer name:
192.168.1.2
Querying target system called:
192.168.1.1
Attempting to resolve name to IP address...
Name resolved to 192.168.1.1
querying...
UDP port 5723 (unknown service): NOT
LISTENING
========= end of log file =========
PortQry developed by Tim Rains
Now as per the above results NOT LISTENING Port is blocked or is not opened and LISTENINGmeans
working or port is opened.
So now using SCOM you will monitor the log file Result.log in the location C:\Port_checker\ saying
if NOT LISTENING comes in the log file throw me a alert in SCOM consle or via email.
To configure that alert you need to create a Generic text log alerting Rule which will throw a alert if any thing added in that log which is not to be added and if it is added like NOT
LISTENING then it will throw a alert.
Refer this link on how to open a Generic text log alerting Rule.
http://blogs.technet.com/b/kevinholman/archive/2009/06/20/using-a-generic-text-log-rule-to-monitor-an-ascii-text-file-even-when-the-file-is-a-unc-path.aspx
Gautam.75801 -
Default LaunchDaemons and open ports?
I recently have written a port scanner for a project at my university and after running it, I discovered that a large portion of my Macbooks' well known ports was open.
These were 21 (ftp), 22 (ssh), 23 (telnet), 53 (domain), 79 (finger)!!, 88 (kerberos), 512 (exec)!!, 513 (login), and a bunch of others (see picture below for open ports - afterwards entered @ grc.com).
I checked, if they are reachable from the internet (see picture below). They were not, but that does not say a lot(?), because if someone wanted to make a bot out of my Mac or collect data from it, this person could contact a C&C server from my machine and start communicating without opening any port of the NAT router, as the router allows bidirectional communication if started by the client(?).
I checked, if these ports are reachable from within a local network, by requesting the services behind them from another computer running Linux. And they are! Everyone within the Non-VPN networks of my university was and is able to fetch personal information from me over fingerd! To prevent further leakage, I will block any incoming connections from now on.
> finger user@{Macbook's IP}
same output as when running locally
> finger user@localhost
[localhost]
Trying ::1...
Login: MyUserName Name: MyNameReplaced
Directory: /Users/MyUserName Shell: /usr/local/bin/fish
On since Sun Oct 26 13:02 (CET) on console, idle 7:52 (messages off)
On since Sun Oct 26 17:15 (CET) on ttys000
On since Sun Oct 26 20:25 (CET) on ttys001, idle 0:05
No Mail.
No Plan.
I am able to login to the Mac via telnet over the LAN, etc.
I checked the configuration of my firewall. It is/was activated. Signed software is allowed to accept incoming connections. Cloaking is not activated and I am not blocking every incoming connection. There are five services in the list below, they are all from Apple. I can not remove them. The minus button is grayed out.
When I ticked 'Block all incoming connections', the services behind the ports were no longer detectable/reachable from the LAN, but the daemons are still running on the Mac!
So my question is, why are these daemons running?! Why on earth is the fingerd running or exec?! This seems not normal. Who has started them (software or person)? I strongly limit access to my computer. I always lock it, when leaving it unattended. I use NoScript in Firefox. Never do I open attachments from mails.
I checked the Mac of a friend with my PortScanner (in his LAN and on his Mac) and his has none of the ports open mine has.
I have not checked my ports/firewall for a long time, so I can't remember if those ports were closed at any time before.
Meanwhile I will read something about launchd, to gather more information.I'm not an expert on this, but I'm not certain what you are concerned about. All messaging in unix systems is done through ports, and so a variety of ports need to be open for normal system operations. OS X out-of-the-box probably strikes a balance between convenience and paranoia - ports that might be more secure closed left open by default so that novice users aren't driven out of their wits - but I can't imagine that it leaves open anything that constitutes a true vulnerability. Or if it does, you should file a bug report.
I'm told every med student suffers from hypochondria at one point or another, and I know that every comp sci student will sooner or later have a short freak-out over security. So take a deep breath... -
After a temporary switch to Verizon wireless internet connection and then back to my usual satellite internet, I can no longer send and receive mail on my Mac Pro (v 10.5). All my mail preferences look to be correct. Called my webhost and tech support said I should do a traceroute that showed asterisks on the first hop; the tech said that meant my emails were not leaving the computer and that led him to tell me I needed to do a port scan. The port scan showed only ports 80, 86 and 88 are open. I was told I would have to have ports 110 (incoming mail) and 25 (outgoing mail) open but I can't find how I should do that anywhere. Help!
It is always recommended to have the ACLs configured on the wired side of the network rather than the wireless side of the network.can you provide the ACL configuration so that we can understand the configuration and find the modification to be done in the same to rectify the issue.
-
Hi all!
This is my first post on this forum I've been tinkering around with honey pots and set one up on my home network. A tutorial I was following mentioned about putting it in the DMZ. So I did. When I was at work I conducted a nmap scan of my home router. SO MANY OPEN PORTS! Of course setting up a DMZ this is to be expected. HH being HH only the honeypot is in it but I'm a little worried that even though I have only put the honey pot in the DMZ, are all the opened ports open to the rest of my network? As I understad it I am wrong but I am concerned just want to double check! Also when I turned of the DMZ and did another scan I found port 4567 to be open. I quick search flagged up a few results. Many people seem to say ignore it but others have said its possible for to be a back door. If I type in my public ip:4567 I get faced with a login page! I have heard that BT install a backdoor on their routers for the NSA and GCHQ normally I'd fob such things off but would be interested to know what is going on with that open port!
Thanks in advance guys!When you have anchor/foreign, the web auth traffic always go to the anchor, so with CWA, the traffic from the anchor to the ISE will need to be permitted . go through the following link this may of help
https://supportforums.cisco.com/docs/DOC-26442 -
How to open ports 2078 and 2077
I can't seem to figure out how to do this.
I need it for a webdisk for my site but can't get these 2 porst to open so it can connect.
any help on how/where I go to do this?I'm not entirely sure if you're using the Mac OS X Server or the Mac OS X client software version here, so the following covers both. Use of System Preferences implies client, though this is a server forum.
With Mac OS X Server 10.6, use the Server Admin tool to open up the ports you need. Launch Server Admin > select the target server > select Firewall > select Settings > select Services, open the ports, Save, etc.
With Mac OS X client 10.5.1 and later and with 10.6 and later, the firewall mechanisms and settings are application-based and not port-based, and you select the application to allow, and it can then use whatever ports it needs. System Preferences > Sharing > Advanced... and then the + to add the application. (Details: [ht1810|http://support.apple.com/kb/ht1810])
If you're running this box as a network gateway, then things can get a little more complex; I'd tend to use an external firewall if that's an option.
If you're running this as the client for the disk services (as I might guess) and if you're accessing a remote web disk on a remote system via ports 2077 (SSL) and 2078, then I wouldn't usually expect to need to open these ports on the client; it's usually the remote server system and not the client that needs to open ports. (Are you getting any diagnostic messages here? Are you looking to serve disks out to other hosts via this protocol? If so, and if you're on Mac OS X Client here, then try adding the application that serves the disks to the list of applications known to the firewall.)
As an alternative, Apple servers and servers from other providers can run WebDAV disk services via port 80, which means that most any server that allows http web connections can also allow WebDAV connections. (WebDAV is a built-in feature of this Apache web server, so most any Apple Mac OS X box can serve disk space using http port 80 and WebDAV.)
The lower level approach to opening the ports is the ipfw tool, and the command line. -
Hi Guys
This is more of an FYI post rather than a oh dear whats wrong post.
We've had the HH2 for about a 2 years or so now and lately have been having some interesting, shall we say, personality traits with our HH2.
Often, for no reason, the HH2 will drop all wireless signals and will not allow anyone to connect, new devices, old devices or ethernet devices. Only a press of the restart button will resolve this.
Now thats not too annoying apart from the hassle but another (major) issue we're having is port opening/gaming.
Last week i decided to start playing a game i hadnt played it years, upon completion of downloading and installation i tried to connect, may i note weve never had any problems with gaming whatsoever with the HH2 in the 2 years weve had it, unfortunately i kept getting connection errors. So being an IT guy myself i decided to pull up the ports for the game and proceeded to open them up in the HH2's manager and assign them to my device.
Tried to reconnect and still got the error.. i was a bit crosseyed here so i thought well i shall try a port scanner and check to make sure my ports have been opened. They hadnt.. i checked the hub again, ports were listed as open and available in the application sharing section and also assigned to my device.
I proceeded to disable firewalls and DMZ my laptop, risky i know but i am an IT guy and know what i am doing. Anyways i restarted the HH2 again to make sure the firewall selection and DMZ applied. I waited and checked the HH2 was up and rechecked the settings all ok.
I ran the port scan again, the ports were still NOT open. Now this is quite annoying. I went to work and tested the game there on a bog standard ADSL line and the game worked fine. Take it home and not a peep.
I have spoken to BT and we're getting a HH3 free of charge to fix the problem but i just wanted you all to know that there could be some serious issues with the HH2 and it not opening ports, nor allowing DMZ to function correctly!
Thanks everyone, have a nice day and apologies on my wall of text.Ok i think this thread is going to turn into a help me thread... in fact i dont think.. i know...
HELP ME!!!
I have received the new HH3 and with furvour decided to get into the hub, setup the wireless and put the ports in the forward list... i excitedly restarted the hub and connected...
and guess what.. still no joy.. ports are ALL closed... i have even DMZ'd my laptop and that isnt working.. im not getting the IP address im still getting an internal 192 address...
Can anyone give me a clue as to whats going on here? pulling my hair out now!
Maybe you are looking for
-
If anyone is able to solve this they are a genius (or I am doing something very stupid!) I am trying to reinstall CS5.5 Master Collection from DVD media on Windows 7 64 bit PC but setup.exe fails due to a msxml3.dll error. Following a big bundle of r
-
when trying to print I get an error message "permission denied" I am the computer administrator so ???
-
Report that filters certain records
Hi I need to create a report in Bex where the status codes have changed from a "5" to a "10". This occurs from previous period to current period. I need to see all records that have changed in status only. I have created a structure where it consist
-
Master Recipe details\ Inspection details based on the ECR number
HI All, Could you please help me in finding one FM which gives Master Recipe details\ Inspection details based on the ECR number which is created in CC31. In the Transaction CC31 for a given Change Number, there is a Master Recipe and Inspection in
-
Hi I want to hide some of the tab pages of the cProjects project. I am able to hide some of the tab pages like Approvals, check list items, control plans, substitute, versions. I want to hide some more tab pages like Accounting, Resources, control pl