Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 4359 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Skype issues again

FernandeZ
Dear all.

I have read so many threads now concerning to the sky problems... and I cannot get it to work. Whatever I try its not helpful and now it makes me crazy, and so I would like to ask you if you have a good combination of configs which will help me in order to get this f***** program to run.

A program without any default ports... What da hell... And who had the idea?!?

But back to the problem.

My ASG:  ASG220 V.8.202 (newest version you can have)
My Skype: Skype V.5.5.0.124

- Generic Proxy enabled with user authentification (I have read something like this in the Forum and because of this I have enabled it
- Web Filtering enabled with antivirus scanning and blocking of spyware communication and several file extension blockings
- Application Control enabled and Skype is allowed for ANY

What I did now... I have configured Skype to use port 10008 as incoming connection port (remote port) and I have seen that Skype likes port 33033 in order to connect a server in the internet. So I created a rule which allows anybody to use these connection. And the Skype startet and it was able to log in. BUUUUT! I could not phone somebody... what makes me really angry now. Additional to this it seems so that the communication between a client in the LAn and the server in the WAn is blocked by the external IP of my ASG. So it seems so that I need to have to configure a NAT Rule?!? 

So what da **** do I have to do to get Skype to work? Is there really an offical way because Skype is implemented in the Application Control?!?

HTTP Proxy log:

[SIZE="1"]2011:10:19-15:58:16 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xad27880" url="78.141.181.220" exceptions="" error=""
2011:10:19-15:58:17 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xbc815328" url="208.88.186.8" exceptions="" error=""
2011:10:19-15:58:17 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xc34c1028" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 4101704560:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:17 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xc34c1028" url="78.141.181.220/" exceptions="" error=""
2011:10:19-15:58:18 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xbc6015a8" url="208.88.186.5" exceptions="" error=""
2011:10:19-15:58:19 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xae8a8448" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 3841530736:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:19 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xae8a8448" url="208.88.186.8/" exceptions="" error=""
2011:10:19-15:58:19 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xc213acd0" url="208.88.186.4" exceptions="" error=""
2011:10:19-15:58:20 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xb711cb8" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 4051348336:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:20 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xb711cb8" url="208.88.186.5/" exceptions="" error=""
2011:10:19-15:58:20 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xc347c758" url="149.5.45.252" exceptions="" error=""
2011:10:19-15:58:21 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xc1f33498" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 4026170224:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:21 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xc1f33498" url="208.88.186.4/" exceptions="" error=""
2011:10:19-15:58:22 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xadecb90" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 4017777520:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:22 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xadecb90" url="149.5.45.252/" exceptions="" error=""
2011:10:19-15:58:22 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0x9ee98b8" url="149.5.45.6" exceptions="" error=""
2011:10:19-15:58:23 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xc1f33768" url="149.5.45.5" exceptions="" error=""
2011:10:19-15:58:24 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xc1f33e70" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 3959028592:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:24 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xc1f33e70" url="149.5.45.6/" exceptions="" error=""
2011:10:19-15:58:24 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="" srcip="192.168.98.91" dstip="" user="" statuscode="000" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction=" ()" size="0" request="0xae478a8" url="149.5.45.70" exceptions="" error=""
2011:10:19-15:58:25 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xbc601878" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 3933850480:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
2011:10:19-15:58:25 iris-2 httpproxy[30307]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.98.91" dstip="" user="" statuscode="200" cached="0" profile="REF_OaOwXHcUJf (Proxy Setting Clients)" filteraction="REF_dhVYWXGXjY (User Content)" size="0" request="0xbc601878" url="149.5.45.5/" exceptions="" error=""
2011:10:19-15:58:26 iris-2 httpproxy[30307]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xae9eb90" function="ssl_log_errors" file="ssl.c" line="50" message="C 192.168.98.91: 3925457776:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:
[/SIZE] 


All in all for me it is very very important that there is no port allowed for INet communications. Everything runs via Proxies. And because of this I deleted the rule with port 33033 and the other changes because I am not happy with it. So is there a way to get it to work without opening ports?!


This thread was automatically locked due to age.
Parents
  • 0
    I think you can take William's answer to the bank.  If you aren't already running in SOCKS5 for authentication, you might want to do that.  Also, if you know what those other programs are, you can block them using the new 'Application Control' capability.

    Cheers - Bob
Reply
  • 0
    I think you can take William's answer to the bank.  If you aren't already running in SOCKS5 for authentication, you might want to do that.  Also, if you know what those other programs are, you can block them using the new 'Application Control' capability.

    Cheers - Bob
Children
No Data