[Zitax]

iChat just don't wants to work properly with firewall on.
I created the allow AIM port 5190, but it has to be checked or unchecked ?
How does this work ?
firewall blocks me to send or to receive, apple should fix this kind of thing, leting ichat out of it.
Help apreciated, thx.

[Wevah]

I did notice that AIM refused to work if I blocked incoming UDP traffic on port 3306 (which is also TCP/MySQL).

I don't know if that's helpful at all, though.

[Zitax]

Anyone else ?

[Zitax]

Really no one ?
I really need to let ichat transfer stuff having the firewall on.

[proxyma]

u need to allow in&out comming trafic between
40000 & 60000 TCP ports.

( & check also this great new site :http://www.ichatmasters.net/

[Zitax]

Originally posted by proxyma:
u need to allow in&out comming trafic between
40000 & 60000 TCP ports.

( & check also this great new site : http://ichatmasters.free.fr/ )

Thx a lot, it seems that worked fine.
BTW where did you get that tip ?
Thx again.

[proxyma]

Well…a bit of curiosity & a good FW ( NetBarrier), that's all.
What do u think of the site ?

[rantweasel]

Originally posted by Zitax:
iChat just don't wants to work properly with firewall on.
I created the allow AIM port 5190, but it has to be checked or unchecked ?
How does this work ?
firewall blocks me to send or to receive, apple should fix this kind of thing, leting ichat out of it.
Help apreciated, thx.

That's not Apple's problem. You've told OS X to not let iChat traffic out, and it's doing what you want. What you need is to learn more about what ports you need open (I suspect that you don't need the whole 40k-60k range, rather just a few) and allow those. Apple didn't break anything - the firewall is working 100%.

mathias

[dfiler]

Originally posted by rantweasel:
That's not Apple's problem. You've told OS X to not let iChat traffic out, and it's doing what you want. What you need is to learn more about what ports you need open (I suspect that you don't need the whole 40k-60k range, rather just a few) and allow those. Apple didn't break anything - the firewall is working 100%.

While technically it is 'working', firewall and router configuration interfaces could be greatly improved. Currently, users must first research the IP protocol and then stumble around for a while. I would bet that less than 1% of all users could succeed at all.

I second the motion for iChat to just work.

More realistically, a list of port linked services and a check box next to each item.

Even better would be an API for 3rd party programs to automatically request for a port to be opened or forwarded appropriately. While this is possible for local, software based firewalls, router configuration for home LANs would be much more ambitious.

Currently, most people sitting at home behind a router and DSL or cable modems have broken functionality in most chat/IM programs. iChat pretends that it sends drag-and-dropped images and files. The features should should be disabled if, upon launch, a test file-transfer fails.

The current situation is really quite pathetic from a UI design standpoint

[Zitax]

Originally posted by proxyma:
Well?a bit of curiosity & a good FW ( NetBarrier), that's all.
What do u think of the site ?

Its ok, but where did u get to make those ports active ?

Thx again.

[proxyma]

In NetBarrier Log of course.
You can see the port used by ichat to transfert files.
Around 49000 for me.
But it's not fix yet, so an interval is needed.
Check the log, and reduce the range in function.

[dfiler]

Originally posted by proxyma:
Well…a bit of curiosity & a good FW ( NetBarrier), that's all.
What do u think of the site ?

Amazing design... but I couldn't figure out what it is supposed to be used for. Excellent portfolio piece? Yes. Tool? I dunno