Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Skype - the new IP telephone client

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> General >> Skype - the new IP telephone client Page: [1]
Login
Message << Older Topic   Newer Topic >>
Skype - the new IP telephone client - 24.Sep.2003 12:03:00 PM   
og@trygging.fo

 

Posts: 3
Joined: 26.Mar.2003
From: Faroe Islands
Status: offline 		Hi.

Does anyone know if Skype (the new P2P IP telephone client) is supposed to function through ISAserver.
For more info on Skype, se http://www.skype.com

I have tried to install the Skype phone client on a workstation behind a B2B ISAserver configuration (with private ip-addresses between the ISAserver's).

But it does not work, even though I have allowed all IP traffic out for this specific client.

Skype claims that the Skype client works on most Firewall solutions.

Have anyone else tried it?
What should be opened on the ISA firewall?

Sincerely
Oli
Post #: 1
RE: Skype - the new IP telephone client - 25.Sep.2003 6:36:00 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Oli,

From what I've seen on the page, it might work if you disable the HTTP redirector and DO NOT configure the client as a Web Proxy client.

Give it a try and let us know how it works for you.

Thanks!
Tom

(in reply to og@trygging.fo)
Post #: 2
RE: Skype - the new IP telephone client - 13.Oct.2003 9:15:00 PM   
Dirky

 

Posts: 36
Joined: 30.Apr.2002
Status: offline 		Hmm, I've tried a few things here and no luck connecting to the Skype server.
However I can connect via my Astaro firewall no problem.
Sigh, possibly more limitations of ISA server?

Mike

(in reply to og@trygging.fo)
Post #: 3
RE: Skype - the new IP telephone client - 16.Oct.2003 8:19:00 PM   
Eliasulin

 

Posts: 2
Joined: 7.Feb.2003
Status: offline 		Hi all,

I've made some testing and wanted to share it.

As Tom mentioned, the HTTP Redirector Filter should be disabled or configured to "Send to requester web server" (preferred)

The 2 things you have to configure are
New Protocol Definition: OutBound TCP 33033
(Probably for Client/Server Connection)
Add the new protocol to a new/existing Protocol Rule.
The FW Client should also be installed.

The "Phone Call" can be made and established from External and Internal Skype user.

Good Luck.

Eli

(in reply to og@trygging.fo)
Post #: 4
RE: Skype - the new IP telephone client - 19.Oct.2003 3:37:00 PM   
sjouken

 

Posts: 7
Joined: 10.Sep.2002
From: Eindhoven, Netherlands
Status: offline 		Is there no way to avoid the installing of the firewall client? [Mad]

(in reply to og@trygging.fo)
Post #: 5
RE: Skype - the new IP telephone client - 19.Oct.2003 4:56:00 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by Eli:
Hi all,

I've made some testing and wanted to share it.

As Tom mentioned, the HTTP Redirector Filter should be disabled or configured to "Send to requester web server" (preferred)

The 2 things you have to configure are
New Protocol Definition: OutBound TCP 33033
(Probably for Client/Server Connection)
Add the new protocol to a new/existing Protocol Rule.
The FW Client should also be installed.

The "Phone Call" can be made and established from External and Internal Skype user.

Good Luck.

Eli
Hi Eli,

Thanks for the tip! Do you use an "all open" protocol rule, or do you use this new Protocol Defintiion with a specific set of protocols? If the firewall client is required, it sounds like this app requires secondary connections.

Thanks!
Tom

(in reply to og@trygging.fo)
Post #: 6
RE: Skype - the new IP telephone client - 19.Oct.2003 4:58:00 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by john sjouken:
Is there no way to avoid the installing of the firewall client? [Mad]
Hi John,

Why not use the firewall client? Not using the firewall client is like have a 12-cylinder engine and only using 4 of them. Install the firewall client and enjoy the improved performance and accessibilty! The firewall client is one of the major reasons to use ISA over simple firewalls like PIX.

HTH,
Tom

(in reply to og@trygging.fo)
Post #: 7
RE: Skype - the new IP telephone client - 19.Oct.2003 5:01:00 PM   
sjouken

 

Posts: 7
Joined: 10.Sep.2002
From: Eindhoven, Netherlands
Status: offline 		Even stranger....
I have configured a outbound on TCP 33033
and installed the firewall client.
But still no go [Frown]

I can see other Skype-users, bit I can't connect to them

[edit]
see also http://forum.skype.com/bb/viewtopic.php?t=106
[/edit]

[ October 19, 2003, 05:11 PM: Message edited by: john sjouken ]

(in reply to og@trygging.fo)
Post #: 8
RE: Skype - the new IP telephone client - 21.Oct.2003 6:28:00 PM   
sjouken

 

Posts: 7
Joined: 10.Sep.2002
From: Eindhoven, Netherlands
Status: offline 		Nobody, please?

(in reply to og@trygging.fo)
Post #: 9
RE: Skype - the new IP telephone client - 21.Oct.2003 8:05:00 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi John,

If their support people would just explain how to make it work with a firewall, instead of saying something meaningless like "open a port X", then we should be able to figure it out.

HTH,
Tom

(in reply to og@trygging.fo)
Post #: 10
RE: Skype - the new IP telephone client - 26.Oct.2003 7:59:00 AM   
Eliasulin

 

Posts: 2
Joined: 7.Feb.2003
Status: offline 		Hi Tom,

I'm using the new Protocol Defintiion with a specific set of protocols.

My testing was on 2 WinXP PC's.
One is behind ISA with Firewall Client installed.
The second is ADSL connection,with ICF enabled.

Eli.

(in reply to og@trygging.fo)
Post #: 11
RE: Skype - the new IP telephone client - 3.Nov.2003 1:10:00 PM   
iahsan

 

Posts: 29
Joined: 24.Oct.2003
From: Karachi
Status: offline 		Hi,
As stated above, Skype uses port 33033 for outbound connections. It can use a user specified port for an inbound connection (check the options). It will use port 80 ibound if its unable to use pther specified ports.

The problem arises from the fact that the program is still in beta and has problems. One of them being that the incoming port that you would specify in the options randomly changes itself for some reason.

As Tom also suggested above.. you need the firewall client running to use this and hence pointing to the need of a secondary connection in addition to port 33033 outbound. I would suggest using port 4391 inbound as thats the port which most consistently shows up in FWC logs while a chat is in session or when someone rings. Skype has been running fine for me. If you have problems, try opening a range of inbound ports in the range of 4900 to 5100.

From my observations, Skype uses around 750KB (KByte) per min (up and down combined). Though this is hardly of any significance to folks with broadband connections in western countries, for our local "CableNet" providers in Pakistan its a matter of concern.

Imran

P.S. my Http redirector is enabled and sends all requests to web proxy.

[ November 03, 2003, 02:21 PM: Message edited by: I m r a n ]

(in reply to og@trygging.fo)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> General >> Skype - the new IP telephone client Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts