AFP548 Changing the world one server at a time.

Firewalled Mac OS X (10.3.9) – Can’t Access With ARD 3.2.x

Home › Forums › Older Versions of Mac OS X and iOS › Mac OS X Server 10.3 › Server Control Apps › Firewalled Mac OS X (10.3.9) – Can’t Access With ARD 3.2.x

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • July 28, 2008 at 6:34 pm #373534
    IsraelThompson
    Participant

    We’ve got a server running Mac OS X (10.3.9) and we recently turned on the firewall on it. When trying to access the server using a newer machine that has Apple Remote Desktop 3.2.x on it, we get blocked. I’ve tried making sure ports 3283, 5900 (even though that’s usually for VNC), 5988 are accessible, but am still unable to get in. What am I missing?

    Sincerely,

    Israel Thompson

    July 28, 2008 at 8:14 pm #373537
    IsraelThompson
    Participant

    See if you can make sense of this:

    Jul 28 15:06:47 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62655 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:48 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62656 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:50 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62657 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:52 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62658 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:54 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62659 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:55 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62660 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:56 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62660 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:57 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62661 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:00 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62662 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:01 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62662 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:02 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62663 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:46 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62667 server_ip(xx.xx.xxx.xx):5900 in via en0

    The xx.xxx.xx.xx is my client machine trying to connect and “server_ip(xx.xx.xxx.xx)” is the server I’m having problems with and the one this log is pulled from. So does this mean 62000 – 62999 need to be enabled? What’s the 5900 all about? Is it trying to connect in with 62xxx and 5900?

    Thanks,

    Israel Thompson

    July 31, 2008 at 8:37 pm #373594
    IsraelThompson
    Participant

    Rule 65000 is one in the advanced tab. It’s labeled as IGMP in the “Service” drop-down, but no ports are specified at all. It’s set as Source address “any” (no ports specified), Destination address “any in setup” (no ports specified). If i turn this rule off I am able to get in via ARD 3.2.x. Is that anything pertinent?

    Israel Thompson

    August 1, 2008 at 4:28 pm #373601
    IsraelThompson
    Participant

    http://img227.imageshack.us/my.php?image=picture2zf8.png

  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.