[IsraelThompson]

http://img227.imageshack.us/my.php?image=picture2zf8.png

[IsraelThompson]

Rule 65000 is one in the advanced tab. It’s labeled as IGMP in the “Service” drop-down, but no ports are specified at all. It’s set as Source address “any” (no ports specified), Destination address “any in setup” (no ports specified). If i turn this rule off I am able to get in via ARD 3.2.x. Is that anything pertinent?

Israel Thompson

[IsraelThompson]

See if you can make sense of this:

Jul 28 15:06:47 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62655 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:48 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62656 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:50 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62657 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:52 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62658 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:54 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62659 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:55 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62660 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:56 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62660 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:06:57 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62661 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:00 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62662 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:01 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62662 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:02 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62663 server_ip(xx.xx.xxx.xx):5900 in via en0
Jul 28 15:07:46 server_name kernel: ipfw: 65000 Deny TCP xx.xxx.xx.xx:62667 server_ip(xx.xx.xxx.xx):5900 in via en0

The xx.xxx.xx.xx is my client machine trying to connect and “server_ip(xx.xx.xxx.xx)” is the server I’m having problems with and the one this log is pulled from. So does this mean 62000 – 62999 need to be enabled? What’s the 5900 all about? Is it trying to connect in with 62xxx and 5900?

Thanks,

Israel Thompson

[Author]

Posts