PIX / MSN

[cnicasio]

hi, I need to configure a pix for file transfer and voice transfer from msn messenger. My users are behind the pix, in the dmz interface. I opened the ports 1863 and 6831 but it doesn't work.

Thx.

[wassim.kreidy]

Hi,

we have experienced a simialr problem and asked Microsoft about it. This was their response:

" Thank you for writing to MSN Messenger Service.

We apologize for the inconvenience you experienced. If you are on a local area network behind a firewall (for example, a corporate network), you can talk to someone who is behind the same firewall that you are, but you cannot connect on a computer-to-computer call with someone outside the firewall.

We hope that this email has provided you with the assistance you needed.

Should you have further inquiries, please feel free to contact us again.

Sincerely,

Chelle

MSN Messenger Support "

And the same seems to apply for the File transfer issue, as tests we have performed show.

I hope this helps.

Regards

[awalnet]

I assume that you are not blocking anything to go outside from the subnet connected behind the DMZ interface.suppose that your dmz subnet is 10.10.10.0/24 you have to apply the following access-list(example acl_outside) on your outside interface to allow file transfer via msn.

access-list acl_outside permit tcp any 10.10.10.0 255.255.255.0 eq 6891

for netmeeting to work you have to write this access-list statement

access-list acl_outside permit tcp any 10.10.10.0 255.255.255.0 eq h323

MSN file transfer and netmeeting are working or my LAN users here.I have tested it as I am myself a LAN user

Regards,

Zeshan Mansoor Jalali

Cisco Security Specialist, CCNP,CCNA,CCIE(written qualified), MCSE+I