RV042 - incorrect port for UDP responses
We just set up an RV042 in the office, and we're seeing problems with DNS lookups.
I did some experimenting with tcpdump and wireshark, and it looks like the responses from the DNS server are sometimes coming back with an incorrect port number - using a port (at least sometimes) from a previous DNS request. Most come back ok, but maybe 1 out of 20 are getting messed up.
I'm not sure if this is a bug in the NAT implementation on the RV042, or a configuration problem, or something else.
I'm seeing the same behavior on multiple machines (Linux and Windows) on the LAN.
RV042 firmware version is 1.3.12.19-tm.
Any suggestions?
Pardon my memory if I am mistaken, when configuring the protocol bind for the WAN port, there are 4 or 5 options. Service, which of course is 1~65535, source IP, in this scenario it should be the phone or PBX, whatever you're using. The destination IP should be 0.0.0.0 and interface is your desired WAN, WAN 1 or 2.
Example:
Wan 1- Cable Wan 2 - Dsl
| |
| ________________ |
|
RV042-----------
____| |
| Computer 192.168.10.100
Tele/PBX 192.168.10.250
On this example to route the Telephone / PBX to WAN 1
All services 1~65535
Source IP 192.168.10.250
Destination IP 0.0.0.0
Interface WAN 1
Please correct me if I am mistaken, I'm currently not at work due to the US holiday
Similar Messages
-
Unable to reuse a port for UDP on Windows
I have a UDP server running on a specific port. When I create the socket on this port, I first created it unbound, set the reuseaddr option to true and then bound it to this port. When I receive a new connection to this port, I spawn a new thread and this new thread creates a new socket on the same port using the same method describes earlier. The new thread then does a connect to this new client.
The problem is that after the connect, the main thread is not able to receive anything on the port. The new thread is fine and handles all the traffic coming from it's connected client. The main thread is pretty useless. Only after the new thread is done and it closes the socket, the main thread starts receiving stuff again.
The most interesting thing out of all this is that this behaviour is seen only only Windows. My code works fine on Linux. The main thread accepts new connections and spawns new threads which do connects and so on.
I am stumped. How do I make windows do multithreading on a UDP socket reusing the same port?Cross/multi-posted, so don't answer here, ok?
http://forum.java.sun.com/thread.jsp?thread=452580&forum=31&message=2059046 -
Forwarding UDP port for Remote Desktop Gateway
What is the correct way to forward UDP 3391 port for RDG server?
What direction should I choose for UDP port parameters? "Receive" or "Receive Send" or something else?Aurimas N, Were you able to get RemtoteFX working through TMG? I have the same issue whre I can not get UDP working with clients conneciting over the WAN. Can you tell me specifically how you got this to work on your TMG?
Thanks
I am not sure how to check to be honest, on TMG I only see 443 port being used, and since it is remoteApp there is no connection indicator, or I don't know how to access it. -
Unable to telnet on command prompt for udp port 514, but able to on cmd for tcp port 514
I am unable to telnet on command prompt for udp port 514. But when I use packet snifer or wireshark I am able to see traffic going to the targetted server from udp port 514. I thought it might be a firewall issue blocking the port from communicating. But
I figured out that windows firewall is disabled. I am able to make similar connections on the cmd for tcp port 514.
I did a netstat -an and see that udp:514 is enabled and listening on the server.
What am I missing here?Telnet actually supports TCP only. You might want to try another tool as suggested here: http://serverfault.com/questions/263032/how-to-connect-to-a-udp-port-command-line
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile -
Set Port to be used by client orb corba for the response to a server
I have a client corba application, and i need to set the port used for corba response on the client host.
How can i set the port used on client for response?
Client Server
<ClientHost>?port?--------------------->4444<serverHost>
ThanksYou mean the local port at the client. It's used for the entire connection, not just the response. You should let the system allocate this rather than trying to control it yourself. Otherwise you restrict yourself to only one connection to the ORB from the client (e.g. no multithreading).
You should arrange with your firewall to allow anyclient port to connect to the ORB. -
Do I need to open ports for NTP?
I just noticed that my hwclock was off by nearly 30 seconds. It's almost certainly due to the recent initscripts update.
As I was looking into resetting the clock, I found out that openntpd is deprecated so I've switched to ntp, configured the daemon, reset the time with ntpd -q, and started the daemon. The time is not accurate again.
I remember back when I first installed Arch I tried to set up ntp but it didn't seem to work, so I tried openntpd and stuck with that. I reached the conclusion that ntp required open ports, which I felt was unnecessary given that openntpd could do the same thing without open ports.
Now that I'm looking at it again, I can't find any definitive answer...
Do I need to open ports for ntp if I only want to sync the system that it's running on?ISC ntpd (the ntp package) will open UDP 123 on all your interfaces regardless of what you do with it. It will work anyway even if you block this port in iptables, assuming that you're allowing responses to established traffic as usual - your outbound mobilization requests to your chosen servers will be enough to allow the responses, and the same with further traffic sent for the lifetime of ntpd. Using iptables like this is probably the easiest way to secure ntpd.
There's also some defense in depth you can do:
- run ntpd as non-root
- run it chrooted to some safe directory (really only makes sense when doing non-root as well, since root can break out of a chroot)
- apply ntpd's built-in access controls (see examples in ntpd.conf, and full docs in ntp_acc(5))
I accomplish the first two of these by chowning /var/lib/ntp (and any contents) to ntp:ntp (so ntpd can write ntp.drift there when non-root), by using a driftfile path relative to the chroot in ntp.conf, and by setting NTPD_ARGS="-g -i /var/lib/ntp -u ntp:ntp" in /etc/conf.d/ntp-client.conf.
For the third, I chose to not allow any remote traffic to initiate anything with my ntpd, with this /etc/ntp.conf:
server ac-ntp0.net.cmu.edu iburst
server ac-ntp1.net.cmu.edu iburst
server ac-ntp2.net.cmu.edu iburst
server ac-ntp3.net.cmu.edu iburst
server ac-ntp4.net.cmu.edu iburst
restrict default nomodify nopeer noquery
restrict 127.0.0.1
driftfile /ntp.drift
Note the two "restrict" lines. The first shuts out remote access of most kinds, and the second allows the local machine all the access that would also be denied to it as well otherwise by the first rule. Note also the driftfile path, relative to the chroot of /var/lib/ntp/.
With all these security features, ISC ntpd can be just as safe as openntpd.
The use of the "iburst" keyword on the server lines to recover more quickly from out-of-contact conditions is also quite nice, and not rude to the remotes like "burst" would be.
One of the nicest other features of ISC ntpd is that it's smart enough to notice when network state changes occur, like bringing a VPN up/down, changing routes, or switching from wired to wireless and back. openntpd tended to just lose connections in these cases. -
UDP responses from multiple PCs
My laptop is on a local area network that consists of the laptop, a switch, and two RF switch boxes.
Not connected to the corporate network.
According to the equpment vendor a command can be broadcast to the local network using UDP and all tthe boxes that receive the request will respond.
The VI that they gave me only shows the response for one the boxes at a time.
How do I go about modifying the VI so that the response from both boxes are received?
Attached is their VI which I have simplified. The IPv4 address is for my laptop.
The boxes are at 192.168.0.141 and 192.,168.0.142
nyc wrote:
There is no input specifically called "local broadcast address".
With "local broadcast address" I meant the "broadcast address for the local subnet".
You are always sending from your own address. That's your own unicast IP address which is automatically added to the header of all outgoing packets. The devices at the other end will respond to the broadcast with a unicast to the source IP of the received packet, i.e. your adapter. Same for the port. "open UDP" reserves a local port, which is used as source port for the outging packets. The destination port is whatever the other devices are listening at, so you have no choice.
All adapters receive messages to their assigned IP address, to the local subnet broadcast address, to the generic broadcast address (255.255.255.255) as well as to certain multicast addresses. On the local subnet, things are actually guided by the MAC address and each adapter maintains an ARP table to correctly form the ethernet header. Your local switches will know (from learning) all connnected MAC addresses and their assigned IPs and will send out any incoming packet to the right connecter. They recognize broadcasts and will automatically send them out on all other connectors. If the address is not local, the ethernet packet is set to the MAC address of the router (the default gateway) and it will read the destination IP to determine which interface (i.e. other subnet) the packet should go out, etc.
nyc wrote:
Could you explain whey the IPv4 address is being OR'd with the negate of the subnet mask?
I am clueless as to the purpose.
Well, that's the correct math, look it up! (the original code does exactly the same, but in a Rube Goldberg kind of way )
For example if your IP address is:
192.168.5.45 and the netmask is 255.255.255.0, the broadcast address is 192.168.5.255
10.47.5.45 and the netmask is 255.0.0.0, the broadcast address is 10.255.255.255
etc.
Thus the local subnet broadcast addrees can be determined from the IP address and netmask.
Note that each address is internally just a U32 integer and boolean operations will function bitwise.
-
Tracing TCP Source/Destination Addresses/Ports for ongoing connections
On Solaris 10 U4 through U7, I'm trying the following just to perform basic tracking of TCP source/destination addresses and ports, using code similar to what is available in tcpsnoop_snv and tcptop_snv.
The odd thing is that the addresses/ports appear to be zeroed out - are they being cached outside of the conn_t data structure?
#!/usr/sbin/dtrace -Cs
#pragma D option switchrate=10hz
#pragma D option bufsize=512k
#pragma D option aggsize=512k
#include <sys/file.h>
#include <inet/common.h>
#include <sys/byteorder.h>
#include <sys/socket.h>
#include <sys/socketvar.h>
/* First pass, for all TCP Read/Write actions, collect source/destination
IP + Port - after a few secs, print them all out */
fbt:ip:tcp_send_data:entry
/* Outgoing TCP */
self->connp = (conn_t *)args[0]->tcp_connp;
fbt:ip:tcp_rput_data:entry
/* Incoming TCP */
self->connp = (conn_t *)arg0;
fbt:ip:tcp_send_data:entry,
fbt:ip:tcp_rput_data:entry
/self->connp/
/* fetch ports */
#if defined(_BIG_ENDIAN)
self->lport = self->connp->u_port.tcpu_ports.tcpu_lport;
self->fport = self->connp->u_port.tcpu_ports.tcpu_fport;
#else
self->lport = BSWAP_16(self->connp->u_port.tcpu_ports.tcpu_lport);
self->fport = BSWAP_16(self->connp->u_port.tcpu_ports.tcpu_fport);
#endif
/* fetch IPv4 addresses */
this->fad12 =
(int)self->connp->connua_v6addr.connua_faddr._S6_un._S6_u8[12];
this->fad13 =
(int)self->connp->connua_v6addr.connua_faddr._S6_un._S6_u8[13];
this->fad14 =
(int)self->connp->connua_v6addr.connua_faddr._S6_un._S6_u8[14];
this->fad15 =
(int)self->connp->connua_v6addr.connua_faddr._S6_un._S6_u8[15];
this->lad12 =
(int)self->connp->connua_v6addr.connua_laddr._S6_un._S6_u8[12];
this->lad13 =
(int)self->connp->connua_v6addr.connua_laddr._S6_un._S6_u8[13];
this->lad14 =
(int)self->connp->connua_v6addr.connua_laddr._S6_un._S6_u8[14];
this->lad15 =
(int)self->connp->connua_v6addr.connua_laddr._S6_un._S6_u8[15];
/* At this point, this->{f|l}ad1{2345}->connua_v6addr.connua_{f|l}addr._S6_un.S6_u8
are empty - where is this data? */
}http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.50/command/reference/CmdGrpC.html#wp1139667
portmap [base-port base_number|disable|enable|number-of-ports number|vip-address-range number]
disable
Instructs the CSS to perform Network Address Translation (NAT) only on the source IP addresses and not on the source ports of UDP traffic hitting a particular source group. This option does not affect TCP flows.
For applications with high-numbered assigned ports (for example, SIP and WAP), we recommend that you preserve those port numbers by configuring destination services in source groups. Destination services cause the CSS to NAT the client source ports, but not the destination ports.
Note If you disable flows for a UDP port using the flow-state table and configure the portmap disable command in a source group, traffic for that port that matches on the source group does not successfully traverse the CSS.
The CSS maintains but ignores any base-port or number-of ports (see the options above) values configured in the source group. If you later reenable port mapping for that source group, any configured base-port or number-of ports values will take effect. The default behavior for a configured source group is to NAT both the source IP address and the source port for port numbers greater than 1023.
There is no possibility to disable it for TCP.
We need to source nat the port to guarantee that the server response comes back on the same module/CPU and the internal packet allocation algorithm is based on src and dst ports.µ
Gilles: -
Portmap translation creation failed for udp src inside dst inside
Hi!
I have a problem with allowing traffic to UC500 subnets on ASA 5505 inside interface.
My asa is a main router with addres 192.168.1.1
UC500 voip box is connected to ASA's inside interface through UC500 WAN port with UC500 with 192.168.1.2 address.
Firewall and NAT on UC500 is disable
UC500 sip traffic works fine. voipbox creates its subnets for data and voip - 192.168.10.0 and 10.1.1.0. another important address is 10.1.10.1 which is UC500 CUE.
My problem is that from within ASA local network (192.168.1.0) i cannot reach UC500 subnets, neither can I reach ASA's local network from the UC subnets.
the log says
3
Sep 07 2013
00:21:49
DC
53
PBXCUE
32901
portmap translation creation failed for udp src inside:DC/53 dst inside:PBXCUE/32901
I tried exempting uc500 subnets on ASA but that didn;t work.
Funny thing is that I CAN reach the UC500 subnets when connecting with VPN to ASA...
Please help! I am not familiar with CLI.
I configured static route to 10.1.10.0 and since then I was able to ping 10.1.10.1 thorugh ASA;s VPN.
I would be grateful for ideas.
Lukasz
global (inside) 1 interface
global (outside) 101 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 101 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface https IIS https netmask 255.255.255.255 dns tcp 200 200 udp 200
static (inside,outside) tcp interface www IIS www netmask 255.255.255.255 dns tcp 200 200 udp 200
static (inside,outside) tcp interface smtp IIS smtp netmask 255.255.255.255 dns
static (inside,outside) tcp interface pop3 IIS pop3 netmask 255.255.255.255 dns
static (inside,outside) udp interface domain RenBetPBX domain netmask 255.255.255.255 dns
static (inside,outside) udp interface 5061 RenBetPBX 5061 netmask 255.255.255.255 dns
static (inside,outside) udp interface sip RenBetPBX sip netmask 255.255.255.255 dns
static (inside,outside) tcp interface 13000 SQL 13000 netmask 255.255.255.255 dns
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 x.x.x.x
route inside PBXCUE-network 255.255.255.0 RenBetPBX 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicyHello Julio!
Thank you for your advice.
I have managed to solve my main problem by reconfiguring my switches vlans - enabling trunk port configs for required ports and allowing them access to both vlans.
Now I can see everything from all of my inside networks.
I continue my ASA adventures - I have managed to configure L2TP client access for my windows users, RADIUS authentication for domain users and yesterday night I have managed to configure site to site VPN with my RV120W router.
I am only an enthusiast but my recent successes have given me apetite for more...
I keep reading forums and trying to solve most of my problems myself but I have faced another one now and thought that maybe you could give me another tip on where to look for the issue:
I still have one problem with my L2TP VPN config - I have configured split tunnel on the group policy to tunnel only 192.168.1.0 network requests.
access-list DefaultRAGroup_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0
My network at home is 192.168.2.0 but it still tunnels everything (when I check my ip after connecting to VPN my home laptop still identifies with ASA gateway(!) address .
access-list outside_access_in extended permit icmp any interface outside object-group DM_INLINE_ICMP_1
access-list outside_access_in extended permit tcp any interface outside object-group DM_INLINE_TCP_1
access-list outside_access_in extended permit tcp any interface outside eq smtp
access-list outside_access_in extended permit tcp any interface outside eq 8080
access-list outside_access_in extended permit tcp any interface outside eq 23456
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 object-group DM_INLINE_NETWORK_1 any
access-list outside_access_in extended permit tcp any interface outside eq 13000
access-list outside_access_in extended permit tcp any interface outside range 8001 8016
access-list outside_access_in extended permit tcp x.x.x.x 255.255.255.0 interface outside eq ssh
access-list inside_nat0_outbound extended permit ip any 192.168.1.240 255.255.255.240
access-list inside_nat0_outbound extended permit ip any PBXVOIP-network 255.255.255.0
access-list inside_nat0_outbound extended permit ip any PBXCUE-network 255.255.255.0
access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 igolomska-network 255.255.255.0
access-list inside_access_in extended permit udp object-group DM_INLINE_NETWORK_2 any object-group DM_INLINE_UDP_1
access-list inside_access_in extended permit ip host IIS any
access-list inside_access_in extended permit ip any any
access-list inside_access_in extended permit ip host RBSTORE_NAS any
access-list inside_access_in extended deny udp any any object-group DM_INLINE_UDP_2
access-list inside_access_in extended permit tcp any any eq 5432
access-list inside_access_in extended permit tcp any host PBXCUE eq www
access-list inside_access_in extended permit tcp host PBXCUE any eq www
access-list inside_access_in extended permit tcp host RBCAMSTORE_NAS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RBSTORE_NAS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RENBETUPS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RenBetPBX host EXCH-MBX eq smtp
access-list DefaultRAGroup_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0
access-list outside_1_cryptomap extended permit ip 192.168.1.0 255.255.255.0 igolomska-network 255.255.255.0
route print shows:
and 192.168.1.240 is my VPN IP - its metric has higher priority than the local gateway.
How do I change it?
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.126 4250
0.0.0.0 0.0.0.0 On-link 192.168.1.240 21
80.51.24.22 255.255.255.255 192.168.2.1 192.168.2.126 4251
127.0.0.0 255.0.0.0 On-link 127.0.0.1 4531
127.0.0.1 255.255.255.255 On-link 127.0.0.1 4531
127.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
169.254.0.0 255.255.0.0 On-link 192.168.2.126 4506
169.254.104.126 255.255.255.255 On-link 192.168.2.126 4506
169.254.255.255 255.255.255.255 On-link 192.168.2.126 4506
192.168.1.240 255.255.255.255 On-link 192.168.1.240 276
192.168.2.0 255.255.255.0 On-link 192.168.2.126 4506
192.168.2.126 255.255.255.255 On-link 192.168.2.126 4506
192.168.2.255 255.255.255.255 On-link 192.168.2.126 4506
224.0.0.0 240.0.0.0 On-link 127.0.0.1 4531
224.0.0.0 240.0.0.0 On-link 192.168.2.126 4506
224.0.0.0 240.0.0.0 On-link 192.168.1.240 21
255.255.255.255 255.255.255.255 On-link 127.0.0.1 4531
255.255.255.255 255.255.255.255 On-link 192.168.2.126 4506
255.255.255.255 255.255.255.255 On-link 192.168.1.240 276
===========================================================================
I am starting to feel like I am using a bit too much of your friendliness ...
Best Regards and have a great day!
Lukasz -
Hi, a few days ago I bought a wireless router WRT160n. I want to ask how to open some port for all in LAN(3 clients). For example all in LAN have PeerToPeer application for torrents. I want to open port for example 20202 for all. Now I open port from menu Applications & Gaming->Single Port Forwarding, but I must set port for each user IP address.
Can somebody tell me how to open port for all in LAN without to config for each computer?
Thanks in advance.Hi gv. I read more about UPnP and the WRT160n User Guide. In section Administration>managment int wrote that UPnP is Enabled by default in my router it is corect. I Setup mu PeerToPeer(eMule) TCP/UDP ports to 20202 and check option "Use UPnP to setup ports". I test and close this port on my router configuration for my computer on "Single Port Forwarding", but in eMule the port is still block. Can you explain why it did not work. For UPnP it says that if Enable it allow users with Windows ME and XP automatically to gonfigure Router ports
Thanks in advance!
Best Regards. -
One socket and two ports, not getting response from the server
Hi everyone,
I am working on device which communicate through Tcp sockets, It has an IP address and one port for listening and another for sending the response.
Problem is that I am able to create a connection to Device ip+port, and i am trying to listen on the same port while the device is sending the response on other port. My problem is that i can't create another socket using this port and therefore not getting the response from the device.
Can you people tell me how to handle such socket communication in java ?
Thanks in advance.I am working on device which communicate through Tcp sockets, It has an IP address and one port for listening and another for sending the response.Are you sure? That's not usual. It would be usual for it to use the same port for listening, reading, and writing.
Problem is that I am able to create a connection to Device ip+port, and i am trying to listen on the same port while the device is sending the response on other port.I would try just reading from the same socket you are sending on. I suggest you have misunderstood how the device works. -
Error while creating logical port for Reporting
Hi,
In one of the training materials for Duet Enterprise, i saw the steps for creating logical port for the consumer proxy /IWTNG/CO_PXY_RECORDS_REPOSITO.
When i am trying to create the logical port, i am getting an error saying,
" SRT Framework exception: Error in WSDL access: Exception occurred in communication framework:Error in HTTP Framework:500 Native SSL error
https://<server:port>/_vti_bin/OBAFileReceiver.asmx?wsdl "
I would like to know is it really necessary to create this logical port for "Reporting Scenario" and is it not created automaticallly using the Installation Wizard??
And in case it has to be created, how to resolve this SRT framework exception?
~ Ramanath.Hi,
the consumer proxy /IWTNG/CO_PXY_RECORDS_REPOSITO was used in Duet Enterprise SP01. Now with SP02 the consume proxy /IWTNG/CO_OBAFILE_RECEIVER_SOA is created.
However, the SSL error that you are getting looks a little strange (it does not mean that there is an error, but it is worth checking):
So can you go to SOAMANAGER -> Service Administration -> Single Service Configuration. In here select "Consumer Proxy" from the "Search by", Search Pattern "/IWTNG/CO_OBAFILE_RECEIVER_SOA" and Field: Both.
You should find one entry. Select it and click "Apply Selection".
Now go to the Configurations tab. Here you should see one Logical Port with name "LOGICALPORTFORREPORTING" with Creation Type "Manually Created". In fact this logical port was created by the Wizard.
Click on Display and scroll down again. Now in the "Additional Information" tab there is a string after HTTP Destination, e.g. 0050568E3F5A1ED096F22339C44BAF83.
Copy this value and go to your SAP GUI -> Transaction SM59.
Here click on Find/Search and search for this HTTP Destination. You should find one Type G RFC Destination that has the target host of your SharePoint server and the path prefix /_vti_bin/OBAFileReceiver.asmx.
Now you can test the service. Just click on Connection Test. The result should be a HTTP Response: 200.
If not, then something went wrong with the automatic configuration and we should take another look at it (for example maybe the SSL certificate from SharePoint that was imported by the Wizard is not valid)
Regards,
Holger.
PS. Don't use the "Ping Web Service" test from SOAMANGER -- unfortunately this is not working consistently. -
Can't set port for IRC in Sharing/Firewall preferences...
I turned on the firewall and was able to specify ports for Bittorrent, but I want to use IRC (it keeps getting blocked, which I'm assuming has something to do with the firewall which I just activated), so I went into System Preferences-->Sharing-->Firewall, scrolled down to IRC and then Edit, for TCP number it has 194 (but grayed out) and UDP it's blank, but I can't alter either entry box.
It's my computer and I have whatever access privileges I need (I think) so at a loss here. Can anyone point me in the right direction?
P.S. Some of the IRC servers I wanted to set up accounts with had port listings of 6667 and the like, that's also why I wanted to specify the number.Create a new entry with a name such as IRC #2 and add the desired ports to that entry. You cannot alter the ports assigned to the default entries; you need to create new ones to specify additional ports.
(15661) -
I have an airport extreme and express setup. My extreme is in my 2nd floor office with windows facing the water. My dock is about 250 ft away down a very steep hill. I have the express about 100 ft down the hill in an electrical waterproof box attached to a tree as high as I could install. The signal is weak and I'm thinking I might have to buy another express. Any thoughts on the best setup for me. I ultimately want to control speakers(hard wired in) down at the dock with my iphone. I have a receiver coming with airplay built in.
Thank you all for the responses. By process of elimination, I think the problem is the connection to the express in between the extreme and dock. I bought another express and tried it at dock, no luck, I then replaced new express where the one is between extreme and dock, no better. I unplugged the express between extreme and dock and there was no difference. So I believe I am connecting to the airport express or extreme that is inside the house. Again because when i approach express that is halfway I reconnect. so if you can understand my chaos, I believe the express in between is not really connecting to the extreme inside my house. Yes, No? So I need to know how to know if the express half way down the hill is getting the connection from the the extreme in the house. This is wearing me out!!!!!You are asking several different questions. If you need to store your photos, music, and movies on an external volume, you certainly can. Any externally connected hard disk drive will work, connected either directly to your Mac or to your Time Capsule as a shared volume.
You should not rely upon using that as a backup device though. Although you certainly may use it for both purposes, it is a better idea to have dedicated backup devices for a variety of reasons not limited to redundancy. You would not want to simultaneously lose all your pictures as well as your backup. If they are all on the same device, that could happen. Furthermore, a backup cannot back up the volume on which it is running.
As for adding an Extreme or Express, using its LAN port for your iMac, and then enable Internet sharing so you can effectively use the iMac as a "hotspot", you can do that too, but I am unclear on what benefit you believe this arrangement would convey for you.
An Extreme's Guest network is separate from its Main network; that is the reason for having it. -
Open port 916/udp not closeable
A nmap scan from the Internet (WAN) against a Cisco RV120W shows an open port 916/udp. This port remains open even if one writes an explicit access rule for the firewall.
A quick googling shows that this port is probably used to access the firmware of the router from the outside as well as it has been involved in security problems some years ago. See http://osvdb.org/show/osvdb/34520
How can this port be closed?
MichaelDear Michael,
Thank you for reaching the Small Business Support Community.
I would first suggest you to upgrade to the latest firmware release version 1.0.4.10;
http://software.cisco.com/download/release.html?mdfid=282981372&softwareid=282487380&release=1.0.4.10
If nmap still shows the port opened, I then suggest you to disable the remote management to determine if this is the root of the problem, then contact the Small Business Support Center to have a TAC engineer figure this out;
https://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
Please do not hesitate to reach me back if there is anything I may assist you with.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.
Maybe you are looking for
-
Issues with upgrading client from 1.2 to 3.0
I've upgraded a bunch of Mac's ARD client from 1.2 to 3.0 using ARD 3 admin's upgrade client feature. On some, I can't Observe or Control. So far I can copy files, run reports, and see current status. I can also ssh into machines with no problems. I'
-
I want to download the "FREE" iPhoto duplicate remover software, but the download process keeps asking me for my payment information. I have tried it several times.. But it says I cannot download this app unless I give my payment information.. So I w
-
PO System error - Vendor's address not maintanence !
Dear friends, Our user created a PO , system reproted "vendor's address not maintanence", We checked Vendor's information, not error on that Vendor No. Brgds WangYong
-
Obsolate statement for function module TABLE_COMPRESS
Hi all, What is the alternate function module for TABLE_COMPRESS? This is going fine in 4.7 version. But in ECC 6.0, if we use this function module we r getting SLIN error (Obsolate statements) . How can we rectify this SLIN error? So we have to use
-
I'm trying to make edits to a metric threshold and it doesn't seem to save my changes. I have full privileges on the target but just to be sure I made the edit as sysman, still didn't work. It appears to save the edit, I get the update successful scr