[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bigsister-general] Perhaps someone has an idea


Within the context of a client communicating with the BigSister 
server, only the destination port (therefore on the server) has 
value 1984. 
The source port has a new value each time a new communication 
channel has been established, hence you can not use it to set 
your firewall rule. 
For security reason you might want to specify the origin IP 
address though. 
If your monitoring data is crossing the Internet, it is safer 
to tunnel it through an SSH channel.

  Costa.

-----Original Message-----
From: suppressed
[mailto:suppressed Behalf Of
suppressed
Sent: 27 December 2006 14:28
To: suppressed
Subject: [Bigsister-general] Perhaps someone has an idea


Hi,

perhaps someone has an idea on that: We changed our FireWall to a
Fortigate and i enabled Port Forwarding to an internal IP. Port 1984
(TCP) is the only port that is forwarded (take a look at the
screenshot). The problem is that BigSister seems to get no information
from the clients via Internet from any client -> all lamps are in status
purple (-> no report). If i change the source port to 1-65535 (TCP)
everything works well. So the conclusion is that some other port has
been involved via the communication process than 1984 TCP. I won?t
forwared all ports to the internal box cause of security issues.

With best regards

Michael


	
	
		
___________________________________________________________ 
All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine 
http://uk.docs.yahoo.com/nowyoucan.html


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bigsister-general mailing list
suppressed
https://lists.sourceforge.net/lists/listinfo/bigsister-general


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.