Welcome to the MacNN Forums.

Axo1ot1 · Jul 21, 2003, 09:01 PM

I have a 4 port linksys cable and dsl router. Currently there are only two computers on the network, one of them is DMZ hosting (I run a small web server). The problem is that iChat can't connect audio or video chats when the router is a part of the equation. If I have the modem plugged directly into my computer I can use them with no problem, but that takes the other computer off the internet, which is bad.

Any ideas?

ghporter · Jul 22, 2003, 07:53 AM

You need to go into the router's setup and open the ports that iChat uses. I don't recall right off what those ports are, but the process is very simple. Open your browser and go to 192.168.1.1, click on the Advanced tab, and then on the Forwarding tab. Click on the Trigering button and follow the instructions.

voyageur · Jul 22, 2003, 08:04 AM

This Apple Knowledge Base article will tell you which ports to open, I think.

mozart11 · 08:09 PM

How do I set up my Snow airport to allow the correct ports to be open for both iChat and iChatAV? I don't use OS X built-in firewall. I only use the airport with NAT. When I try to add a port in port mapping of the base station it wants, Public Port, Private address and private port. What do I put in for ichat and ichatAV? Is it different settings for regular iChat and AV iChat? I have ichat on one computer and ichatAV on another.
What would be better to use also? The NAT in the airport and distribute ip addresses, or assign a range, turn off NAT? Then use the built in firewall in OS 10.2.6? I have three laptops that all access the internet via airport and we file share and print wirelessly.

Thanks

stevesnj · Aug 7, 2003, 04:22 PM

one of them is DMZ hosting (I run a small web server).

BAD IDEA!!! You should not DMZ any web server if you don't have to. I used to DMZ for my server and would get a zillion hits pinging and someone set up an e-mail relay on it. You should use port fowarding for the server.
Like this:

kentuckyfried · Sep 5, 2003, 07:46 PM

^ I've opened up the ports that are mentioned in the Apple Knowledge base article ....

--------
UDP Ports
UDP Port 5060 is used by iChat AV for signaling and initiation of chat invitations. To use iChat AV behind a firewall, make sure your network administrator has opened UDP port 5060.

UDP Ports 16384 to 16403 are used to send and receive video and audio data. For any particular conference, 4 ports from that range of 20 are utilized.
One port is used for each of the following:
Video in
Video out
Audio in
Audio out
-------

However, I still cannot initiate a voice or video chat. What's wrong? Anybody else have the same problem?

I am using OS 10.2.6 with an iSight. Linksys BEFW11S4 v.2 router. The actual computer is a 733 mhz g4 quicksilver.

kampl · Sep 5, 2003, 08:28 PM

In my experience, you will need to allow UDP 5060 and the range UDP 16384-16403 both inbound and outbound on both endpoints in order for the AV functions to work. I have not worked this in a NAT/PAT situation so you may run into trouble there aswell. I couldn't say for certain without testing.

kentuckyfried · Sep 5, 2003, 08:57 PM

^ What do you mean though by inbound and outbound on both endpoints? that doesn't apply if the other person doesn't have a router, right?

kampl · Sep 6, 2003, 02:18 PM

I guess my info on the subject isn't all that useful. I only have to deal with NAT at my home with any regularity fortunately for me.

I did however find an interesting site regarding the subject. The Lunatic Fringe

milhous · Sep 11, 2003, 01:43 AM

Hi:

Are you using the Linksys BEFSR41 router? We use this router extensively at our apartment with DHCP and I've had audio iChats with no problem. Not sure about the video though since I don't have a webcam.

Make sure you have the latest firmware update and that you have Stateful Packet Inspection (SPI) turned on. I'll have to get back to my apt and look through the router config to see if there's anything else.

I fully agree with stevesnj on DMZ. It should hardly be used or used only as a last resort.

kentuckyfried · Sep 11, 2003, 11:07 PM

I FINALLY fixed the problem. it was so hard to figure out b/c i think the friend I was testing it with, he's got a problem with the setup on his end. I have to iron that part out later tonight or this weekend.

- If I disconnect my router, i can talk with him fine.

- With the router in place, there's something missing I think. I can talk to another person though at a faraway university...

what was the fix...?

Enter in the port settings as stated on the Apple Knowledge webpage:

Port 5060
Port 16384-16403
Possibly Port 5298 (somebody please verify if this one is really needed.

In the Linksys BEF411SW router, you enter these port settings under "port forwarding" OR "port triggering" (which you bring up by pressing the button labeled "port triggering" on the "port forwarding" tab). But not both at the same time as the Linksys tech support was mentioning.

He also mentioned to make sure NOT to have the DMZ option set to anything if you have port forwarding on, that last number should be a "0" so that it's off.

Once the port forwarding is set, the DMZ is off (as it is by default), everything should work fine. Well, almost...

kentuckyfried · Sep 11, 2003, 11:08 PM

I'm not sure if the Linksys tech support is 24-7 since I called them up last week at 2 a.m. and nobody answered (hahaha go figure), but I did call them last night and after a long wait, somebody finally picked up. Here's the number in case anybody gets really stuck:

Linksys 24 hour tech support

1 800 326 7114