[AG-TECH] Firewalls and Port Blocking.

[George Estes]

This is the list of ports someone posted earlier........george
-----------------------------------------------------------------------------------------------
PORT USAGE IN THE AG ENVIRONMENT

All AG node hosts

Receive:

         SSH (TCP/UDP 22)
                 from each other and internal network
         AG Beacon server (HTTP TCP 9999)  ***
                 from beaconserver.accessgrid.org 140.221.9.160
         ESnet Beacon server (HTTP TCP 9999)  ***
                 from thorn.es.net 198.128.1.27
         AG Beacon client (Multicast UDP 56464)  ***
                 from any to 233.2.171.1
         ESnet Beacon client (Multicast UDP 47777)  ***
                 from any to 233.4.171.1
         NTP (TCP/UDP 123)
                 from time server

Send:

         SSH (TCP/UDP 22)
                 to each other
         AG Beacon client (Multicast UDP/IGMP 56464)  ***  !!!!
                 to 233.2.171.1
         ESnet Beacon client (Multicast UDP/IGMP 47777)  ***  !!!!
                 to 233.4.171.1
         AG Beacon client (UDP 9997)  ***  !!!!
                 to beaconserver.accessgrid.org 140.221.9.160
         ESnet Beacon client (UDP 9997)  ***  !!!!
                 to thorn.es.net 198.128.1.27
         NTP (TCP/UDP 123)
                 to time server

Display Machine, aka DPPT|RPPT|VNC Client

Receive:
         Video Conference (VIC) (Multicast UDP >= 50000)
                 [see attached list for addresses of each virtual venue]
                 from any to any multicast group
         Web browser (HTTP TCP 80)
                 from anywhere
         MUD (TCP 7777)
                 from venues.accessgrid.org 140.221.10.85
         VNC (TCP 5800-5805,5900-5905)
                 [5800|5900 + X-windows screen number]
                 from server machine
         Distributed PowerPoint (DPPT) (TCP 80, 5001)
                 from DPPT server machine
         Remote PowerPoint (RPPT) (TCP ?? > 15000 recommended)
                 from RPPT server machine

Send:

         MUD (TCP 7777)
                 to venues.accessgrid.org 140.221.10.85


Video Machine

Receive:

         Video Conference (VIC) (Multicast UDP >= 50000)
                 [see attached list for addresses of each virtual venue]
                 from any multicast group

Send:

         Video Conference (VIC) (Multicast UDP >= 50000)
                 [see attached list for addresses of each virtual venue]
                 to any multicast group
Audio Machine

Receive:

         Robust Audio Tool (RAT) (Multicast UDP >= 50000)
                 [see attached list for addresses of each virtual venue]
                 from any multicast group

Send:

         Robust Audio Tool (RAT) (Multicast UDP >= 50000)
                 [see attached list for addresses of each virtual venue]
                 to any multicast group


DPPT Server Machine

Receive:

         DPPT control input- incoming port 4561 for JSDT registry
Send:

         DPPT control output (Multicast ???)
                 to DPPT Client(s)
          incoming port 5001

DPPT Master Machine


At 04:00 PM 10/7/2003 -0600, Jimmy Miklavcic wrote:
>I've built a new node and I'm inside a firewall. I'm fairly sure they are 
>allowing multicast traffic through but they might be blocking ports. What 
>do I need to tell the administrators of this firewall in order to get 
>video & audio data through? When I ran the beacon earlier today I got a 
>solid grey row & column, except for my own system of course.
>
>Thanks,
>Jimmy
>
>--
>Jimmy Miklavcic
>Multimedia Specialist
>jhm at chpc.utah.edu
>
>UNIVERSITY OF UTAH
>CTR FOR HIGH PERFORM COMPUTING
>155 SOUTH 1452 EAST RM 405
>SALT LAKE CITY, UT 84112-0190
>
>Office: 801.585.9335
>  Fax: 801.585.5366
>
>http://www.chpc.utah.edu/~jhm
>http://www.anotherlanguage.org
>