[AG-TECH] AG and firewalls

[Jay Beavers]

We're programmatically opening ports in the Windows XP Internet
Connnection Firewall for UDP packets and it's passing or blocking
multicast UDP as appropriate.

 - jcb

-----Original Message-----
From: bernholdtde at ornl.gov [mailto:bernholdtde at ornl.gov] 
Sent: Friday, March 21, 2003 3:55 PM
To: ag-tech at mcs.anl.gov
Cc: bernholdtde at ornl.gov

What firewall hardware/software are people using when they put AG
nodes behind firewalls?  My local mcast expert says she knows of no
hardware firewall that properly supports mcast, so both she and I are
curious about other people's setups.

At the moment, we're trying to put up firewalls around ours using
ZoneAlarm on the display machine and iptables on audio and video.  The
ZoneAlarm stuff seems to be working fine, but we're only part way
through the iptables stuff.  If anyone's done this and has examples
they can share, I'd be most appreciative.

Thanks
--
David E. Bernholdt                   |   Email: bernholdtde at ornl.gov 
Oak Ridge National Laboratory        |   Phone: +1 (865) 574 3147    
http://www.csm.ornl.gov/~bernhold/   |   Fax:   +1 (865) 574 0680