MSN Messenger problems

[paland]

PIX 525 running 6.0(1)

We allow any outbound connection, limit on inbound.

Normal MSN text chatting works fine. Trying to establlish a voice connection doesn't. According to MS you need to allow incoming udp with a source or destination port of 6901. I've done this. HOwever it still doesn't work. Logging shows the packets being rejected aren't destined for 6901 and appear to be random port numbers. Even if I remove the 6901 rule I still don't see any rejections for 6901. Has anyone gotten MSN messenger voice to work through the PIX?

Thanks.

[thomas.chen]

The voice feature is going to run on random high ports (usually a range of UDP). You’ll have to open them all up. I think other messengers (i.e. Yahoo!) use standard h.323 which the PIX can handle transparently.

[supson]

Are you using NAT or PAT (Overloading on 1 ip address) ?