[AG-TECH] Vic - sending packets on all ports to trigger firewall rules that will allow incoming video

Joseph Stone stone004 at umn.edu
Fri Jul 7 10:45:23 CDT 2006


Some firewalls will allow incoming packets from an outside bridge to be sent
to an inside node if that node first sends a packet to the outside bridge.
This works well for rat (incoming audio occurs as soon as transmit is
selected)

Vic doesn't work this way, at least not in AGTK 2.4.   I can see video from
participants inside firewalled networks but they can't see anyone else.  I
heard that AGTK 3 used a modified vic that sends out packets on all (both)
ports and that would trigger firewalls to allow the incoming video.  I
downloaded just the AGTK-3.0.1 installer, ran it to have it copy the
services zip files, and extracted vic from VideoService.  Actually, I had
someone (the network security administrator) inside the firewalled network
do this and had him run this vic with voyage as the bridge server and use
the udp port for the NCSA Lobby.

No go.

It worked for me but I'm on an open network.

Should this standalone test have worked?  Do the files have to be copied
into the 2.4 directories before it will work?



Joseph Stone 
Senior Informatics Manager 
Family Medicine Community Health, Medical School, Univ. of Minnesota 
Suite 220 Dinnaken 
925 Delaware St. SE 
Minneapolis, MN 55414 

(612) 624-3192 
stone004 at umn.edu




More information about the ag-tech mailing list