• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Server block RingCentral on UDP prot 5060

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Server block RingCentral on UDP prot 5060 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Server block RingCentral on UDP prot 5060 - 15.May2009 6:53:24 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Hi,
 
           I have problame in ISA server 2006 block to connect RingCentral. I have opened Ports for it but unable to connect.I made a rule for it
 
RingCentral -----> Allow ----> UDP :8000 - 8200, inboutn and outbound 5060 -----> Internal -----> External.
 
But unable to connect. I got this log form server please help me.























Original Client IP
Client Agent
Transport
Source Port
Bytes Sent
Bytes Received
Client IP
Destination IP
Destination Port
Protocol
Action
Rule
Result Code
HTTP Status Code
Client Username
Source Network
Destination Network
URL
Server Name
Log Record Type

192.168.66.18
UDP
68
6263
6465
192.168.66.18
255.255.255.255
70
71
DHCP (request)
Denied Connection
[Enterprise] Default rule
0xc004000d FWX_E_POLICY_RULES_DENIED


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1106
100101
102103
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Initiated Connection

0x0 ERROR_SUCCESS


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1106
209
1521
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Closed Connection

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1134
176177
178179
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Initiated Connection

0x0 ERROR_SUCCESS


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1134
214
215
1521
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Closed Connection

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
UDP
250251
252253
254255
192.168.66.18
255.255.255.255
260
261
DHCP (request)
Denied Connection
[Enterprise] Default rule
0xc004000d FWX_E_POLICY_RULES_DENIED


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1141
290291
292293
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Initiated Connection

0x0 ERROR_SUCCESS


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1141
328
329
1521
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Closed Connection

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1142
366367
368369
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Initiated Connection

0x0 ERROR_SUCCESS


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1142
404
405
1521
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Closed Connection

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1143
442443
444445
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Initiated Connection

0x0 ERROR_SUCCESS


Internal
Local Host
-
GATEWAY
Firewall

192.168.66.18
TCP
1143
480
481
1521
192.168.66.18
192.168.66.66
1745
Microsoft Firewall Client (TCP)
Closed Connection

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN


Internal
Local Host
-
GATEWAY
Firewall

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com
Post #: 1
RE: Server block RingCentral on UDP prot 5060 - 24.May2009 8:20:35 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
I cant se any traffic in your logs which is destined for 5060 or UDP 8000-8200. Are you sure you pasted the right logs? Where is this server located?

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 2
RE: Server block RingCentral on UDP prot 5060 - 26.May2009 2:53:00 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
yes its server log i have copy it form server....and i didn'nt open any 8000-8200 prot....how you check it...?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 3
RE: Server block RingCentral on UDP prot 5060 - 26.May2009 8:59:54 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Can you explain em what have you done so far and what exactly you want to do? the rule which you have made you have included UDP :8000 - 8200, inboutn and outbound 5060  and i your last post you said you haven't created any. I am bit confused.

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 4
RE: Server block RingCentral on UDP prot 5060 - 27.May2009 6:45:46 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Hello sir,

Actually, we are using RingCentral for send and reciece faxes you can check it hare..www.ringcental.com. and my problem is its not connect on ISA firewall client..I have opened recommanded port for it and also try to open all traffic but its not able to connect...can you help me for it ?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 5
RE: Server block RingCentral on UDP prot 5060 - 27.May2009 9:03:44 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Hey, I really dont know much about the RingCentral but on checking the http://info.ringcentral.com/guides/digitalline/SPA-2102/userguide.pdf you need

5060 UDP Inbound and Outbound but it's inconsistent
Range UDP 16384 - 16482 Inbound and Outbound

Is there any server installed at your end?How is this setup?



_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 6
RE: Server block RingCentral on UDP prot 5060 - 28.May2009 5:06:15 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Its just a small software like MSN Messanger you can send and recieve Faxes by this and i have opened all port for it but its not able to connect.5060 is SIP protocol and ISA support SIP..?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 7
RE: Server block RingCentral on UDP prot 5060 - 28.May2009 8:48:36 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Hmm.... SIP traffic is not allowed by default because there is no protocol in ISA for SIP. You have to create one

When you create a rule Allow All outbound traffic then ISA will allow All/only the protocols which are mentioned in ISA.

Create a new UDP protocol with "Send Recieve" on port 5060. Then you allow all outbound rule will include this protocol as well

But, also check with RingCentral's support to know what all ports you need. Then create all those protocols.

< Message edited by inderjeet -- 28.May2009 8:50:05 AM >


_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 8
RE: Server block RingCentral on UDP prot 5060 - 29.May2009 7:07:03 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
I have created custum protocols which RingCentral asked but its still not working
any more idea...?

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 9
RE: Server block RingCentral on UDP prot 5060 - 29.May2009 9:15:49 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Try doing a Network Capture on the ISA Server to see what all ports are being used by the RingCentral software installed on your machine.

I haven't worked on this so i really no the specifics of this.

By the way, what are the ports/protocols they said to open?

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 10
RE: Server block RingCentral on UDP prot 5060 - 1.Jun.2009 2:17:25 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
They recommand these prots (5060-5090, 16384-16482) UDP port for inbount and outbound and i have try these prots.....but not connected...

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 11
RE: Server block RingCentral on UDP prot 5060 - 1.Jun.2009 9:01:15 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
I am not sure how will you open those ports inbound for your client software because that will need a route relationship between the External and the machine you have. For route relationship to work your client machine should be on Public Network. Is your ISA Server directly connected to internet? Can you draw a rough diagram of your network?

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 12
RE: Server block RingCentral on UDP prot 5060 - 2.Jun.2009 4:17:56 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Yes sir,you are right its working direct on internet but not working via ISA Server..while i checked client in our network they didn't got ISP dns ip address they are getting local dns server ip...how i can make route relationship with external...
http://www.4shared.com/file/109336000/b259a622/Net.html
and this zip file diagram of network.sir is you have orkut ID...I have send a request if your just add me and when you will be online i will chat with you and tell you whats my problem...thaks please send and id on which you will be online my ID is dhiman_vimal@hotmail.com in orkut...

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 13
RE: Server block RingCentral on UDP prot 5060 - 3.Jun.2009 10:23:22 AM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
I am not sure if your problem with get resolved from the DNS point of view. But Anyways, if you have the ISA Servers IP address as the Default Gateway for your client machine Then your local DNS server should have forwarders set to the ISPs DNS Servers. Check http://blogs.techrepublic.com.com/window-on-windows/?p=501 for How to set the forwarders

Moreover, It's good to install the ISA Firewall Client (FWC) on the machine and check if that works. This makes more sense in this scenario rather than making them SecureNAT.

Install a FWC on the client machine and see the behavior

Sorry dude i am hardly online on Chat

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to vimal)
Post #: 14
RE: Server block RingCentral on UDP prot 5060 - 4.Jun.2009 3:37:25 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Thanks i will test it on weekend...

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to inderjeet)
Post #: 15
RE: Server block RingCentral on UDP prot 5060 - 6.Jun.2009 8:06:09 AM   
vimal

 

Posts: 84
Joined: 31.Oct.2007
From: INDIA
Status: offline
Hello sir, I have tested it but I am not able to connect. I have configure DNS foreword for ISP DNS. can you help me for how i can ping google.com and any external domain form internal ISA Client...If client able to resolve external domain name. Then i think RingCentral able to find route ...when i have configure gateway for internal network then it try to login but after not connected...

_____________________________

Regards,
Vimal Dhiman (MCSA ,ISA Firewall)
http://computerworldhelpline.blogspot.com

(in reply to vimal)
Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Server block RingCentral on UDP prot 5060 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts