Outbound udp traffic being blocked

Ed Potter <[email protected]>
Newsgroups gmane.network.guarddog
Message-ID <[email protected]>
Hi,

I have several Windows machines behind a Guarddog firewall.  I'm trying to run 
Hamachi on one of them (see my prior post).

Guarddog is blocking outbound UDP traffic from the client running Hamachi.

Here's a snapshot from syslog:

Jul 11 12:53:55 main kernel: DROPPED IN=eth1 OUT=eth0 SRC=192.168.0.163 
DST=69.90.101.31 LEN=32 TOS=0x00 PREC=0x00 TTL=63 ID=22174 PROTO=UDP SPT=4287 
DPT=30040 LEN=12 
Jul 11 12:53:59 main kernel: DROPPED IN=eth1 OUT=eth0 SRC=192.168.0.163 
DST=69.90.101.31 LEN=32 TOS=0x00 PREC=0x00 TTL=63 ID=22175 PROTO=UDP SPT=4287 
DPT=30041 LEN=12 
Jul 11 12:54:03 main kernel: DROPPED IN=eth1 OUT=eth0 SRC=192.168.0.163 
DST=69.90.101.31 LEN=32 TOS=0x00 PREC=0x00 TTL=63 ID=22179 PROTO=UDP SPT=4287 
DPT=30042 LEN=12 
Jul 11 12:54:07 main kernel: DROPPED IN=eth1 OUT=eth0 SRC=192.168.0.163 
DST=69.90.101.31 LEN=32 TOS=0x00 PREC=0x00 TTL=63 ID=22182 PROTO=UDP SPT=4287 
DPT=30043 LEN=12 

Guardog is blocking outbound UDP traffic from port 4287 to several destination 
ports.  I'm not sure that 4287 will always be the same.  It might change when 
the client is rebooted or Hamachi is reloaded.

I set up a protocol to allow UDP/4287 and enabled it for service from the LAN 
as well as service from the Internet.  (My lan side zone is called LAN and is 
set to 192.168.0.0/24).  IT DOESN'T WORK!  I get the log entries above.

And what if Hamachi picks another port??? 

I don't see how to tell Guarddog to permit outbound UDP traffic in general.

Can this be done with Guarddog?

Thanks,  Ed

 





-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.