[AG-TECH] Direction of communication with a Virtual Venue Server

[Brian Corrie]

Another comment along these lines... vic and rat are not very firewall
friendly. With AG 1.2 we could get around that because port numbers were
static and one could open up a select number of ports. With the dynamic
allocation of port numbers in the AG 2.1.x software methinks this is somewhat
more problematic. Am I missing something? We are mostly concerned with
providing bridging to people behind firewalls at the moment but I think the
issue is the same with venues on multicast as well. Dynamic port allocation
for Vic and Rat cause big problems with firewalls...

Am I missing something here???

Brian


> -----Original Message-----
> From: Robert Olson [mailto:olson at mcs.anl.gov]
> Sent: Friday, September 26, 2003 8:29 AM
> To: shudo at ni.aist.go.jp; ag-tech at mcs.anl.gov
> Cc: shudo at ni.aist.go.jp
> Subject: Re: [AG-TECH] Direction of communication with a Virtual Venue
> Server
> 
> 
> At 12:12 AM 9/27/2003 +0900, shudo at ni.aist.go.jp wrote:
> >I suppose AGTk 2.x needs establishment of TCP connections 
> initiated by
> >a Virtual Venue Server and it is the cause of the problem I'm facing.
> >I guess it because the AG node can use a VV server that I run locally
> >on the inside of our firewall.
> >
> >Is this correct?  If so, it's natural that AGTk 2.x do not 
> work in our
> >network configuration.  And I have to ask our network administrators
> >to change the configuration of the firewall.
> 
> The AG client should, for all of the basic functionality, make only 
> outgoing connections. Things that won't work are lead/follow 
> and personal 
> data on the client behind the firewall.
> 
> Are you able to ping the venue server from your machine? 
> Which venue server 
> were you trying to contact?
> 
> --bob 
> 
>