WRT400N ports closing

Under the applications & gaming tab>single port forwarding section I have configured a couple of ports to stay open.  They keep closing automatically, however, and the only way to open them up is to reboot the router.  This is really only a big problem when I can't log into my NAS file server remotely, and then it's a big problem.
Any solutions to keeping the ports open?
Thanks!

I am assuming your testing if the ports are open using one of the computers behind your linksys router right? If yes, then that is the reason why your getting failures. It would be better for your to do the test on using a computer that is not connected behind your router. Meaning you will do the test outside.
To protect your router against possible DNS Rebinding Attacks, certain actions would not work behind the router. I believe Cisco designed there routers that way to protect you from the mentioned security threat.
So if you want to test if the ports are open, do it from outside and do not use a local computer
for info about DNS Rebinding, click the link below
 http://blog.trendmicro.com/trendlabs-security-intelligence/protecting-your-router-against-possibl-dn...

Similar Messages

  • 922 TCP ports closed!

    Hi All,
    Nmap gave me some disturbing news last night; I have 922 TCP ports closed on my computer, including stuff like Trinoo, Elite and some other trojans that I would think are Windows threats only. Even though the ports are closed (I've got firewall enabled), I have no idea how and why they appeared on my computer. I have a wireless router, but don't know if that matters. Thanks 4 your help.

    Hi,
    as you said, the ports are closed, this does mean that they are inaccessible so you don't have to worry. Additionally, when you're sitting behind a wireless router, it's own firewall should protect you from outside access. Anyway, it would be helpful if you could provide the whole output of nmap and tell us if you've scanned the IP which belongs to your local network or the IP which was assigned to your wireless router by your ISP.
    Cheers,
    ulrik

  • SSL Port closed ?

    Hi guys...
    do you know why the port 993 is stil closed after changing the configuration to listening IMAPs on my messaging server ?
    i did the following changes
    /opt/sun/comms/messaging/lib/configutil -o service.imap.enablesslport -v yes
    /opt/sun/comms/messaging/lib/configutil -o service.imap.sslport -v 993
    I also install a certificate
    bash-3.00# /opt/sun/comms/messaging/bin/msgcert list-certs
    Enter the certificate database password:
    Alias Valid from Expires on Self-signed? Issued by Issued to
    Server-Cert 2009/04/23 10:01 2009/07/23 10:01 y CN=xxxx.xxx Same as issuer
    1 certificates found
    and restart the server, but after restarting the port 993 is still closed....
    I do nestat -na | grep 993 , but nothing is returned
    I have messaging 7 the one that comes with SC 6 update 1 (convergence)
    thanks a lot guys
    CA

    Its mentioned here : http://docs.sun.com/app/docs/doc/819-2651/acmjp?l=en&a=view
    ( you can find all configutil configuration parameters description here )

  • [SOLVED] Samba port closed?

    I tried to connect to my home computer via samba yesterday...something that I do regularly, and was not allowed to connect.  Samba has been running fine for +1 year on this machine with no problems. 
    In reviewing various google search results it seems that some how port 139 is now closed, which I guess would explain why I can no longer connect.
    # nmap -p 139 -sT 192.155.0.*
    Starting Nmap 6.01 ( http://nmap.org ) at 2012-06-30 12:18 EDT
    Nmap scan report for 192.155.0.1
    Nmap scan report for 192.155.0.122
    Host is up (0.00010s latency).
    PORT STATE SERVICE
    139/tcp closed netbios-ssn
    a little more
    # nmap -sT 192.155.0.122
    Starting Nmap 6.01 ( http://nmap.org ) at 2012-06-30 12:36 EDT
    Nmap scan report for 192.155.0.122
    Host is up (0.00015s latency).
    Not shown: 998 closed ports
    PORT STATE SERVICE
    111/tcp open rpcbind
    6543/tcp open mythtv
    Nmap done: 1 IP address (1 host up) scanned in 0.08 seconds
    I did not have iptables installed...but following other suggestions I installed and found:
    # iptables -vnL
    Chain INPUT (policy ACCEPT 1867 packets, 2016K bytes)
    pkts bytes target prot opt in out source destination
    Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target prot opt in out source destination
    Chain OUTPUT (policy ACCEPT 1298 packets, 107K bytes)
    pkts bytes target prot opt in out source destination
    So, any ideas on how I get port 139 open again?
    TIA
    Jeff
    Last edited by damacas (2012-07-03 01:02:34)

    Samba does not appear in any of the entries when I run ss -ap using the problematic samba version.
    errors.log shows the following when I switch to newer version of samba
    Jul 2 12:07:59 localhost smbd[16035]: [2012/07/02 12:07:59.536828, 0] auth/auth_util.c:707(get_guest_info3)
    Jul 2 12:07:59 localhost smbd[16035]: SamInfo3_for_guest: Unable to locate guest account [pcguest]!
    Jul 2 12:07:59 localhost smbd[16035]: [2012/07/02 12:07:59.537265, 0] smbd/server.c:1235(main)
    Jul 2 12:07:59 localhost smbd[16035]: ERROR: failed to setup guest info.

  • Ports closing at random

    I am having some trouble with port mapping. I have several apps on my iPhone for streaming media from my home computer remotely (i.e., when I am traveling). For several months, all worked just fine. Over the last several months, however, one by one they have stopped working. I realized finally that the ports that were assigned to the server apps on my home computer had closed. Using Network Utility and canyouseeme, I have discovered that, for some reason, my computer is closing and opening ports seemingly at random. I'll identify an open port, map it using Airport Utility, assign it to a server app, it'll work for a few days, than all of a sudden I'll find that the port is closed. Any ideas why this is happening, and what I can do about it? Thanks.

    A possible fix is to trash the .plist in Home/Library/Preferences with CharPalette in its name.

  • SPA 962 -- Intermittently no audio (RTP port closed/unreachable)

    Greetings all!
    We recently purchased 21 Linksys SPA 962 phones for our office. We are running these directly from our PoE switch (Cisco 300) to our sipx box which is on the same subnet and switch (sipx is not running iptables). Most of our phone calls work correctly but we are finding that periodically (say 1 in 10 phone calls) we have no audio. There is no NAT in the setup so this should all be relatively straightforward.
    The most interesting part of the problem is that it appears to be the phone itself. The reason I believe that it is the phone is because of the attached pcap trace. You can see the first call in this trace is bad and the second one is actually completed correctly.
    The negotiation over SIP all seems to work correctly and the phone says what RTP port to use but when sipx tries to communicate to that RTP port the phone returns an ICMP port unreachable! From attaching a syslog to the phone as a debug server it appears that the phone believes it has opened up the receiving port but further down it attempts to send rtp back to sipxecs and it cannot send rtp back but this is because I believe the port failed to allocate/open in the first place.
    I have tried all four of the available Cisco firmwares that I could find and they all produce the same issue. I also have tried putting the phone on it's own VLAN, tried SRTP, tried symmetric RTP, tried Sticky 183 and nothing seems to fix the behavior.
    Did we get bad phones???
    We also have a Grandstream ATA gateway with polycoms attached and all of those phone calls work 100% of the time.
    Thanks in advance!

    It's also unusual that it's happening on all 5 of the 21 phones that I have tested to make sure it wasn't just one of them that seemed to have the issue. All of them have a manufacture date of March 2010. I too have seen the Max RTP ICMP Err parameter and it is zero so it shouldn't be a factor.
    Also, as you can see from the pcap dump there is no RTP packet that ever gets sent from the phone to the pbx so there isn't an opportunity to receive an ICMP Port Unreachable response from the pbx which would trigger the shutoff.
    Unfortunately, we threw away the boxes since this purchase was part of an office move and the cleanup crew thought we didn't need them anymore so returning them is likely not an option. The seller on Amazon stated that manufacturer remedies need to be pursued.
    Do I have any other options? I know the EOL announcement states that August 17, 2012 is the last date for a failure analysis which is rapidly approaching.
    Thanks,
    Jarrod

  • Bouyges telecom ports closed...

    hello,
    I'm a new owner of the fabulous iPhone 3GS.
    before I was at Orange, with an Original iphone, and every applications where working correctly, but now, I am at Bouygtel, and all applications using special ports are not working.
    not working applications I noticed :
    MOCHA VNC, port 5900 à 5999
    Atomic Clock, port inconnu
    TouchTrem, port 22
    radio Sing Sing (par fstream), port 8080
    could apple confirm to me that it's a bouygtel problem, and not an Apple problem ?
    the said to me to contact apple about it...
    this problem will be a huge problem if they do nothing, because a lot of clients will want to use this kind of app, and won't be abble to.
    jean

    This is a user to user support forum. Where Bouygtel is not an official carrier of the iPhone, they may not support all iPhone features.

  • WRT54GX2 ethernet ports closed

    I recently added a computer to my network. I have a print server-the WPS54G-that I have had plugged in to ethernet port 4 for over a year. When I set up the computer and moved things around, I plugged the computer into #4. Then I tried the print server in port #3 and it won't work-the green light on the front of the router doesn't come on. I switched them, and cannot access the internet when the computer is plugged into port#3. The only port on the router that works is #4.
    Is there some way for me to turn these on or something? I thought it was supposed to detect when something is plugged in, but it hasn't so far.
    Thanks !

    The ports on the router should work by default and lights should come on. There is no way to turn it off or disable this ports as far as I know. You may have bad port on your router if that's the case.
    Try this diagnostic test a "loopback" test: Get an ethernet cord and plug it in on the internet port and the other end to the ports which you think is bad. The internet light should lit up as well as the corresponding ports where you have plugged it in, this means that the particular port is good.
    If the ports are good after the loopback test, try checking your device manager on your computer, make sure the ethernet card is enabled and is working properly, you may force the speed of your card to 10 half duplex = to do this, kindly go to www.linksys.com/kb and look for answer id 945.

  • Ports probe shows "Closed"  not "stealth"

    Hello. I just installed an Airport Extreme Wireless and when I go to GRC Reports and scan my ports...most are reported as "closed". How do I program the router to hide or "stealth" my ports? All previous routers I've used made my ports "stealth"...I bought the Airport router for the USB hard disk option...but don't want my computer or router responding to pings n probes!

    I have the same problem, all ports closed with the exclusion of port 53 open.
    You can try port forwarding to stealth your Airport.
    Go to GRC MP3 Open Ports for more info: http://media.grc.com/sn/SN-043-lq.mp3 and also NAT Traversal: http://media.grc.com/sn/SN-042-lq.mp3
    Link: http://www.grc.com/SecurityNow.htm#82
    Hope Apple will fix this problem soon!
    PowerBook   Mac OS X (10.4.8)  

  • "Closed" port allowing connections

    I installed Transmission to get distro .iso's even though I'm typically wary of P2P programs. One reason is the interesting behavior that I'm seeing when Transmission is open. I'm using the iptables.basic rules that come with the package. An nmap scan from another computer in my wireless network shows that the connection port is closed but when I scan my IP address (not localhost) from my computer, it says that the torrent client port is the only one that is open which is consistent with the fact that it is also accepting connections (even without any port forwarding enabled on the router or my machine). I would like to at least have a choice whether or not I allow connections to my machine but the only option seems to be not using Transmission at all. Is this the case? If not, why is the port closed according to external tests yet it is accepting connections?

    upnp is the only thing I can come up with.

  • Ports Showing as closed not stealth

    I recently got the Airport Extreme N Router. On my old router, if I went to www.grc.com and ran the "shields up" test. All my ports would show up as "stealth" and I would pass the security test. With my new airport router, I run the test and it fails because they ports show up as closed, not stealth.
    My friend also has the Airport Extreme N router. When he runs the test, he gets stealth. I have been through all the settings and can not figure out how to accomplish this added level of security. I also don't know what I have done wrong to make my ports appear this way.
    Any thoughts or help would be appreciated.

    I have the same problem, all ports closed with the exclusion of port 53 open.
    You can try port forwarding to stealth your Airport.
    Go to GRC MP3 Open Ports for more info: http://media.grc.com/sn/SN-043-lq.mp3 and also NAT Traversal: http://media.grc.com/sn/SN-042-lq.mp3
    Link: http://www.grc.com/SecurityNow.htm#82
    Hope Apple will fix this problem soon!
    PowerBook   Mac OS X (10.4.8)  

  • Is there any way to set a stealth  mode on the ports in Panther

    The built-in firewall in Tiger provides a 'Stealth Mode' setting that makes the ports nonresponsive to external attempts to connect. The Panther firewall doesn't have this capability. Does anyone know of a way to enable this on a Panther machine (specifically 10.3.5 & 10.3.6) - even if it involves installing a utility application is ok.

    Ok, question for Karl.
    When I go to https://www.grc.com/x/ne.dll?bh0bkyd2
    and do the ShieldsUP Stealth test from outside my hardware firewall connected directly to the internet (SSH turned off for the test) why do I get this result?:
    GRC Port Authority Report created on UTC: 2006-09-25 at 06:03:43
    Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
    119, 135, 139, 143, 389, 443, 445,
    1002, 1024-1030, 1720, 5000
    0 Ports Open
    0 Ports Closed
    26 Ports Stealth
    26 Ports Tested
    ALL PORTS tested were found to be: STEALTH
    Specifically ftp reports this:
    21
    FTP
    Stealth There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!
    The only thing that fails is the PING test. Because they can ping my address. I don't have firewall turned on and I am running 10.3.9 not 10.4.
    Any ideas? Is this test just not thourough enough?
    Run the test for yourself and see. You will need to click Proceed at the bottom of the page to start the test.

  • I will Paypal you $100 if you can resolve this Port Forward problem

    Believe me when I tell you, If you are the person who fixes this problem, I will GLADLY Paypal you $100.
    This is so unbelievable. Short story is, after 12 hours of paid support through Support RIX, 6 hours with TWC support, and 4  different modems there isn't a single person in these groups that can get ports forwarded on my Linksys E4200 router.
    I am running a fresh copy of windows 7 with all updates and no anti virus installed. I purchased a Motorola ARRIS SURFboard modem 200 series DOCSIS 3.0 so I have no double router issues. Before I was using the TWC moden/routers in bridge mode.
    I have no problem setting a static IP or configuring port forwarding. It doesn't matter if I have windows firewall on or off. I can't get an outside port checking website that can verify an open port.
    I am trying to play Battlefield 4 using the port forwarding request they provide.
    If I run a local port check program on my computer it will confirm the ports open. Ok, Fair enough. They tell me the outside port checking utilities will say the port is closed unless I am running the program that uses these open ports.
    SO I run the game and check and it always says port closed. One of the ports I want to open is 80. It has to be open to get internet anyway but it still shows closed using the online port checking websites. 
    I connected the computer to the modem. No router. I keep getting ports closed or filtered when I check through 6 different port checking sites. Leads me to think their is some kind of block in the ethernet card software.
    Its a Realtek PCIe GBE Family controller with a driver date of 8/26/2014. Latest one I could find.
    I think its an ethernet card filter. Just my thoughts. Here is the current adapter card settings.
    Advanced settings on Ethernet card
    Auto Disable Gigabit/ Disabled
    Flow Control/ RX & TX Enabled
    Green Ethernet/ Enabled
    Interrupt Moderation/ Enabled
    IPv4 Checksum Offload/ RX & TX Enabled
    Jumbo Frame/ Disabled
    Large send Offload v2 (IPv4)/ Enabled
    Large Send Offload v2 (IPv6)/ Enabled
    Network address/ You can check the box for Value and add one. Currently its checked to Not present
    Priority & VLAN/ Enabled
    Receive buffers/ 512
    Receive Side Scaling/ Enabled
    Shutdown Wake-on-Lan Enabled
    Speed and duplex/ Auto Negotiation
    TCP Checksum Offload (IPv4)/ RX & TX Enabled
    ''''''''''''''''''''''''''''''''''''''(IPv6)/ RX & TX Enabled
    Transmit buffers/ 128
    UDP Checksum Offload (IPv4) RX & TX Enabled
    '''''''''''''''''''''''''''''''''''''''(IPv6) RX & TX Enabled
    Wake on Magic Packet/ Enabled
    Wake on Pattern match/ Enabled
    WOL & Shutdown Link Speed/ 10 Mbps First
    I used a port tester downloaded from PCWinTech.com v3.0.0. It says the ports are open. When I close port 80 it says port 80 is closed. My problem is nothing outside my network can confirm an open port. It always states port closed.
    The game I am playing is Battlefield-4. I have played all of the campigns without any problem but once online it crashes. The BF-4 community says I need to open 5 single ports and 5 port ranges. This is what I am trying to do.
    We have tried an ARRIS router modem, a Ubee router modem (both in bridge mode) and are now using a motorola modem. All with the same problem. We checked the ports during game play and they all say closed.
    I will post pictures of my current router settings.

    What model router do you have?
    What Firmware version is currently loaded?
    What region are you located?
    What is your current model ISP modem your using now? 
    What ISP Modem service link speeds UP and Down do you have?
    Check cable between Modem and Router, swap out to be sure. Link>http://en.wikipedia.org/wiki/CAT6 is recommended.
    Check ISP MTU requirements, Cable is usually 1500, DSL is around 1492 down to 1472. Call the ISP and ask.
    http://kb.linksys.com/Linksys/ukp.aspx?vw=1&docid=88e63d78588142e6bb68e22d7faf2046_Configuring_the_M...
    Router and Wired Configurations
    Setup DHCP reserved IP addresses for all devices ON the router. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting and maintain consistency for applications that need to connect as well as mapped drives.
    Ensure devices are set to auto obtain an IP address.
    If http://en.wikipedia.org/wiki/Ipv6 is an option on the router, select Local Connection Only.
    If you set up port forwarding, disable uPnP and test. 
    When you check for port status, you have to be actively using the port before you scan check as you may get a false negative if your not using the port. If your using the port then check the status, you should get an accurate result. 
    I would try using Port Range Triggering instead of PF and set up the port as follows for your PC that your gaming with:
    0 thru 65535. A bit less hassle to set up then all those different port rules. 
    PC 3rd Party Security Software Configurations
    Turn off all anti virus and firewall programs on PC while testing. 3rd party firewalls are not generally needed when using routers as they are effective on blocking malicious inbound traffic.
    Turn off all devices accept for one wired LAN PC while testing.
    Disable any downloading client software managers, i.e. Torrents or similar.

  • Write to serial port asyncronously

    I am trying to write a commands to a serial port but my problem is that the operation is tedious so it is freezing up my UI. What makes it more complicated is that I must call this procedure when the form loads I want to ask if anyone can provide an alternative
    way to get the same or better result I was thinking of running it asynchronously but I don't know how to?
    This is the code I am calling on load
    If lblConnected.Text = "" Then
    MsgBox("Please connect to port.", MsgBoxStyle.OkOnly, "Validation")
    Exit Sub
    End If
    RichTextBox1.Text = ""
    Try
    With SerialPort1
    rcvdata = ""
    .Write("AT" & vbCrLf)
    Threading.Thread.Sleep(1)
    .Write("AT+CMGF=1" & vbCrLf)
    Threading.Thread.Sleep(1)
    .Write("AT+CPMS=""SM""" & vbCrLf)
    Threading.Thread.Sleep(1)
    .Write("AT+CMGL=""ALL""" & vbCrLf)
    Threading.Thread.Sleep(1)
    .Write("AT+CNUM" & vbCrLf)
    Threading.Thread.Sleep(2000)
    Dim lineoftext As String
    Dim arytextfile() As String
    Dim myString As String
    lineoftext = rcvdata.ToString
    arytextfile = Split(lineoftext, "Your number is", CompareMethod.Text)
    myString = "Your number is"
    lineoftext = lineoftext.Substring(lineoftext.IndexOf("Your number is"), 40)
    lineoftext = lineoftext.Replace("Your number is", "")
    lineoftext = lineoftext.Substring(0, 13)
    txtDonglePhoneNumber.Text = LTrim(lineoftext)
    End With
    Catch ex As Exception
    MsgBox(ex.Message)
    End Try
    I am trying to extract the phone number from this whole routine  and it works but its freezing up my UI. How can I run from another thread.
    If you think it you can achieve it

    Imports System.IO.Ports
    Imports System.Threading
    Public Class Form1
    Private comport As SerialPort
    Private sending As Boolean
    Private Sub Form1_Load(sender As System.Object, e As System.EventArgs) Handles MyBase.Load
    sending = False
    End Sub
    Private Sub Button1_Click(sender As System.Object, e As System.EventArgs) Handles Button1.Click
    comport = CreateComport(comport)
    If sending = False AndAlso OpenComport(comport) = True Then
    Dim t As Threading.Thread = New Threading.Thread(AddressOf SendData)
    t.IsBackground = True
    t.Start(comport)
    End If
    End Sub
    Private Sub Button2_Click(sender As System.Object, e As System.EventArgs) Handles Button2.Click
    CloseComport(comport)
    End Sub
    Private Function CreateComport(ByVal port As SerialPort) As SerialPort
    If port Is Nothing Then
    port = New SerialPort("COM4", 9600, Parity.None, 8, StopBits.One)
    End If
    Return port
    End Function
    Private Function OpenComport(ByVal port As SerialPort) As Boolean
    Try
    If (Not port Is Nothing) AndAlso (port.IsOpen = False) Then
    port.Open()
    End If
    Return True
    Catch ex As Exception
    MessageBox.Show(String.Format("Exception :{0}", ex.ToString()))
    Return False
    End Try
    End Function
    Private Sub CloseComport(ByVal port As SerialPort)
    Try
    If (sending = False) AndAlso (Not port Is Nothing) AndAlso (port.IsOpen) Then
    port.Close()
    MessageBox.Show("Port closed")
    End If
    Catch ex As Exception
    MessageBox.Show(String.Format("Exception :{0}", ex.ToString()))
    End Try
    End Sub
    Private Sub SendData(ByVal port As Object)
    Dim buffer(1023) As Byte
    For i As Int32 = 0 To buffer.Length - 1
    buffer(i) = i Mod 256
    Next
    sending = True
    Try
    DirectCast(port, SerialPort).Write(buffer, 0, buffer.Length)
    Catch ex As Exception
    CloseComport(DirectCast(port, SerialPort))
    MessageBox.Show(String.Format("Exception :{0}", ex.ToString()))
    Finally
    sending = False
    End Try
    End Sub
    End Class
    在現實生活中，你和誰在一起的確很重要，甚至能改變你的成長軌跡，決定你的人生成敗。 和什麼樣的人在一起，就會有什麼樣的人生。 和勤奮的人在一起，你不會懶惰； 和積極的人在一起，你不會消沈； 與智者同行，你會不同凡響； 與高人為伍，你能登上巔峰。

  • RDS and Gateway issues: Cannot get remoteapps to run without opening port 3389 on firewall

    I am testing the setup of a small RDweb server to host QuickBooks for some remote sales users (4 users). For the most part, I have everything installed on one virtual server (using 2012r2 "Quick Start" session host deployment with the additional
    Licensing and Gateway server roles added to the same server).
    Everything works excellent with one exception. External clients cannot launch published apps without having port 3389 open on the firewall, even with the gateway role installed and the 'Deployment Properties' set to use the gateway. They can properly connect
    to the RDweb site and view the published apps. The only way it works is open the firewall port (at which time I can disable the gateway or leave it configured and it works either way). Internally, everything works accordingly. I have followed the steps outlined
    on many sites and have combed though the forum here to no avail.
    Error received (summarized but is a well documented error):
    remote desktop can't connect to the remote computer: 1- Your user account is not listed (it actually is) or 2- You might have specified the remote computer in NetBios format . . etc.
    This is an existing SBS 2011 environment with additional virtual servers setup to host QuickBooks as outlined below:
    Current setup:
    Used Quick Start to install Remote Desktop Services in hosted sessions mode
    Installed the additional roles for Licensing and Gateway server on same server
    Configured wild card public certificates on all four services (Connection Broker(2), Web Access and Gateway)
    Configured internal DNS to properly lookup our external FQDN of this server (ex. quickbooks.contoso.com points to quickbooks.contoso.local
    One thing I noticed (just now) when I launch a published app and the firewall has port 3389 closed, a dialog box pops up directly after launching the app that warns about running a RemoteApp program and mentions the Remote Computer and the Gateway Server
    as both the same (which it is); however, I would have assumed one would have listed the internal server's name while, instead, both are listed as the external FQDN. Either way, internal DNS should still allow it to properly route . . no? I don't know . . I'm
    sure I am just missing something in a routing configurations somewhere. The gateway service is not properly looking up the RDweb service and then seeming not routing the encapsulated RDP session through HTTPS. . .. is my guess . .
    I was reading about the "set published name" commandlet; however, I am not experiencing a certificate name mismatch; however, the certificate name does show up as *.contoso.com versus the actual name. I may just be grasping as straws now . . :)

    Ok, while I was in the server and looking over the BPA scans: "The Remote Desktop Gateway (RD Gateway) server Secure Sockets Layer (SSL) certificate may not have a valid certificate subject name." This may be due to it showing up as *.companyname.com
    versus quickbooks.companyname.com. Anyhow. .. on to the list of actions above:
    Changed RD RAP from "Select Active Directory" group to "Allow any network resource" and tested with port 3389 closed on firewall:
    Worked. Initially it did not as I had used a custom shortcut created from earlier; however, after logging into the RDweb site again, the application loaded fine now (after the RD RAP change)
    No error message appeared; however, I did notice that for a split second, the word Error did appear in the browser's tab title, but only very shortly. The app launch does take a bit longer too now (about 10-15 seconds, up from about 4 seconds with the port
    open). This, I could care less about so long as we are properly forwarding the traffic through the gateway.
    As for log entries, I had spend quite a bit of time in there and only had minor issues with loading user profile setting taking too long and policy settings preventing the redirection of USB devices. Looking again, no issues still. Just a bunch of informational
    entries where I would connect before (and disconnect) but only with the port on the firewall open; otherwise, there was not an entry corrolating to when I would receive an error before. Now though, I am connecting after the RD RAP change and logs are showing
    connections even with the port closed. These are in "operational", the "admin" log only shows the update to the RD RAP configuration.
    Yes, the LAN's DNS server does relay the lookup information for my public FQDN as the local LAN address. No need for a local host record.
    I have now added a new rule in our firewall to allow and forward UDP port 3391 traffic to the internal server hosting remote services
    Thank you very much for your assistance on this matter. The RD RAP rule was default built during the creation of this services. Why is the resource not cross-referencing AD security groups? I could have sworn I created a group for that . . .

Maybe you are looking for