Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 5240 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Stumped: Getting AppleTV, Facetime, iMessage working

stego41
Running UTM9.2 on Dell PC intel core 2 duo 2.2 with 2 gb ram

Asus RT-AC87u as Access point, with Asus switch... wifi works for all devices...

VOIP works...

What has me completely stumped is getting my 2 apple tvs working, as well as Facetime and iMessage on my ipads etc...

The UTM is full configured with intrusion prevention, firewall etc...

I do see logged activity in my firewall for an apple tv being dropped... TCP.

Isnèt there a "simple" how to for these devices one could implement? I assume everyone would require the exasct same setup for these devices since their use is pretty limited.

Thanks for the help


This thread was automatically locked due to age.
  • 0
    Hi, 

    1. please check all the logs (rule #2)
    https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065
    and post entries matching your blocked traffic; please use the FULL Log not the Live logs.

    2. are you using the Web Protection (proxy)? In standard or Transparent mode?

    Barry
  • 0 in reply to BarryG
    Thanks will do. 

    Looking at that list, seems I violated rule #1. I did not use an fqdn resolving in public domain. Installation guide mentioned this was not necessary.
  • 0
    That can cause problems (with notifications, etc.) but I don't think it is the cause of your problem.

    Barry
  • 0 in reply to BarryG
    ok, here are the raw log entries for my appleTV (ip 192.168.1.20)

    [PHP]2014:11:20-17:25:24 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:24 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:24 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:25 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:25 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:26 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:27 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:27 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="0:1b[:D]5:fe:ea[:D]9" dstmac="0:1a:a0:9e:a9:87" srcip="7.249.126.129" dstip="224.0.0.1" proto="2" length="36" tos="0x00" prec="0xc0" ttl="1" 
    2014:11:20-17:25:30 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:32 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:34 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:34 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="58:55:ca:2e:cc:2" dstmac="68:5:ca:2a:53:e5" srcip="192.168.1.116" dstip="17.151.16.21" proto="17" length="76" tos="0x00" prec="0x00" ttl="63" srcport="123" dstport="123" 
    2014:11:20-17:25:37 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:40 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" 
    2014:11:20-17:25:42 dellutm ulogd[4472]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth1" srcmac="68:5:ca:2a:53:e5" srcip="108.175.42.193" dstip="192.168.1.20" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="49321" tcpflags="RST" [/PHP]

    I dont have any specific FW rules configured for the device. Only rules i have are the ones set during the setup process (web surfing, DNS, FTP and Email Message)

    I do have lots of other services turned on..but no exceptions anywhere for the device.

    My internal lan interface is on eth1 and WAN is eth0.

    Thanks for the help!

    Let me knwo if this is what you were looking for, or need more info.
  • 0 in reply to stego41
    Sorry..missed your 2nd question

    I'm using web protection in transparent mode.
  • 0 in reply to stego41
    ok, so managed to get apple tv working.

    i enabled 2 firewall rules for my apple tv devices:

    1. all local ports to any inet with dest port 5223 TCP (Apple push notification)
    2. local port 123 to any inet dest port 123 UDP (Network Time Protocol)

    The above rules were added for each apple tv, but that still didnt work. Noticed log data in the web filtering for the devices, so i decided to disable web protection altogether and see.

    That did it... web filtering was interfering with my apple tv devices... not sure why, but based on the above, is this a good start?

    is it advisable to add the apple tvs to exception list in the web filtering since im mostly streaming audio/video here anyways...

    I do have other things i need to look at.. icloud mail not working, facetime, imessage and airplay, spotify, facebook on my blackberry 10...