iChat Server won't transfer files

I cannot find the ports to forward from my router to my Mac Mini server for the iChat server file transfers. These are the current ports forwarded to iChat server via port forwarding:
tcp 1080
tcp 5060
tcp 5190
udp 5190
tcp 5220
tcp 5222
tcp 5223
tcp 5269
tcp 5297
udp 5297
tcp 5298
udp 5298
tcp 5678
tcp 7777
udp 7777
tcp 16384-16403
LIEconomyAsked:
Who is Participating?
 
LIEconomyConnect With a Mentor Author Commented:
I've given up on this for now as I have more pressing matters to attend to (ie: vCenter deployments)
0
 
njxbeanCommented:
Try forwarding tcp 5297
0
 
njxbeanCommented:
oh sorry i see you have it listed.  is the firewall on on your macmini server?
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
LIEconomyAuthor Commented:
No this is Shorewall installed on my Ubuntu router.
Internet -> Ubuntu/Shorewall -> unmanaged 8 port switch -> Mac mini server
On the internal network clients can send files to each other just fine.
0
 
nxnwCommented:
I think you may have some UDPs and TCPs reversed.

See page 120 of Network Services Administration Version 10.6 Snow Leopard

All docs are at http://www.apple.com/server/macosx/resources/documentation.html

Also, while file transfer works on the LAN, the problem may still be the configuration of the server's firewall. It could be set to allow access to the required port from addresses in your private IP range but block access from other addresses. Looking at your server's firewall log during a failed transfer will disclose the port, if this is the issue.

That being said, you have a lot of open ports on your firewall. You may want to:
1. assess which are absolutely required and close the rest;
2. close all of them and restrict access to VPN;
3. use non-standard ports for WAN access and reroute the packets to the correct ports at the firewall.
4. a combination of the above.
0
 
LIEconomyAuthor Commented:
I'll take a look at the page, but the server itself has no firewall active. There is only a firewall at the internet side as the internal subnet is just my home, and is relatively safe.
0
 
nxnwCommented:
The server firewall is not just to protect it from attacks within the LAN. It is the second line of defence against whatever makes it through the NAT firewall. The NAT firewall is not impenetrable.
0
 
LIEconomyAuthor Commented:
Ok here is my new port layout:
udp 5678
tcp 5222
tcp 5223
tcp 5269
tcp 7777
udp 5060
udp 16384-16403

I'll let you know if this works.
0
 
LIEconomyAuthor Commented:
Oh Here is a sample of the File Proxy Log during a few attempted transfers. If anything there is successful it is because it is LAN to LAN
2010-11-11 15:45:21-0500 [XmlStream,client] Starting factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-14 19:19:26-0500 [-] Received SIGTERM, shutting down.
2010-11-14 19:19:26-0500 [__builtin__.Service] (Port 7777 Closed)
2010-11-14 19:19:26-0500 [__builtin__.Service] Stopping factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-14 19:19:26-0500 [XmlStream,client] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 2 seconds
2010-11-14 19:19:26-0500 [XmlStream,client] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-14 19:19:26-0500 [-] Main loop terminated.
2010-11-14 19:19:26-0500 [-] Server Shut Down.
2010-11-14 19:20:17-0500 [-] Log opened.
2010-11-14 19:20:17-0500 [-] twistd 8.2.0 (/usr/bin/python2.6 2.6.1) starting up.
2010-11-14 19:20:17-0500 [-] reactor class: twisted.internet.selectreactor.SelectReactor.
2010-11-14 19:20:17-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-14 19:20:17-0500 [XmlStream,client] __builtin__.Service starting on 7777
2010-11-14 19:20:17-0500 [XmlStream,client] Starting factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 15:45:45-0500 [-] Received SIGTERM, shutting down.
2010-11-15 15:45:45-0500 [__builtin__.Service] (Port 7777 Closed)
2010-11-15 15:45:45-0500 [__builtin__.Service] Stopping factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 15:45:45-0500 [XmlStream,client] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 2 seconds
2010-11-15 15:45:45-0500 [XmlStream,client] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:45:45-0500 [-] Main loop terminated.
2010-11-15 15:45:45-0500 [-] Server Shut Down.
2010-11-15 15:46:38-0500 [-] Log opened.
2010-11-15 15:46:38-0500 [-] twistd 8.2.0 (/usr/bin/python2.6 2.6.1) starting up.
2010-11-15 15:46:38-0500 [-] reactor class: twisted.internet.selectreactor.SelectReactor.
2010-11-15 15:46:38-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:46:38-0500 [Uninitialized] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 2 seconds
2010-11-15 15:46:38-0500 [Uninitialized] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:46:41-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:46:41-0500 [Uninitialized] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 7 seconds
2010-11-15 15:46:41-0500 [Uninitialized] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:46:49-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:46:49-0500 [XmlStream,client] __builtin__.Service starting on 7777
2010-11-15 15:46:49-0500 [XmlStream,client] Starting factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 15:49:07-0500 [-] Received SIGTERM, shutting down.
2010-11-15 15:49:07-0500 [__builtin__.Service] (Port 7777 Closed)
2010-11-15 15:49:07-0500 [__builtin__.Service] Stopping factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 15:49:07-0500 [XmlStream,client] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 3 seconds
2010-11-15 15:49:07-0500 [XmlStream,client] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:49:07-0500 [-] Main loop terminated.
2010-11-15 15:49:07-0500 [-] Server Shut Down.
2010-11-15 15:49:15-0500 [-] Log opened.
2010-11-15 15:49:15-0500 [-] twistd 8.2.0 (/usr/bin/python2.6 2.6.1) starting up.
2010-11-15 15:49:15-0500 [-] reactor class: twisted.internet.selectreactor.SelectReactor.
2010-11-15 15:49:15-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 15:49:15-0500 [XmlStream,client] __builtin__.Service starting on 7777
2010-11-15 15:49:15-0500 [XmlStream,client] Starting factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 18:54:22-0500 [-] Received SIGTERM, shutting down.
2010-11-15 18:54:22-0500 [__builtin__.Service] (Port 7777 Closed)
2010-11-15 18:54:22-0500 [__builtin__.Service] Stopping factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 18:54:22-0500 [XmlStream,client] <twisted.internet.tcp.Connector instance at 0x1006c4c68> will retry in 2 seconds
2010-11-15 18:54:22-0500 [XmlStream,client] Stopping factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 18:54:22-0500 [-] Main loop terminated.
2010-11-15 18:54:22-0500 [-] Server Shut Down.
2010-11-15 18:54:31-0500 [-] Log opened.
2010-11-15 18:54:31-0500 [-] twistd 8.2.0 (/usr/bin/python2.6 2.6.1) starting up.
2010-11-15 18:54:31-0500 [-] reactor class: twisted.internet.selectreactor.SelectReactor.
2010-11-15 18:54:31-0500 [-] Starting factory <twisted.words.protocols.jabber.xmlstream.XmlStreamFactory object at 0x1015b2d90>
2010-11-15 18:54:31-0500 [XmlStream,client] __builtin__.Service starting on 7777
2010-11-15 18:54:31-0500 [XmlStream,client] Starting factory <__builtin__.Service instance at 0x1015b6ef0>
2010-11-15 19:22:21-0500 [JEP65Proxy,0,172.25.0.24] Adding connection:  c99a1721d4ab7f28c495ea293e5d39729a2f1fb1 <__builtin__.JEP65Proxy instance at 0x1015be200>
2010-11-15 19:22:21-0500 [JEP65Proxy,1,172.25.0.28] Adding connection:  c99a1721d4ab7f28c495ea293e5d39729a2f1fb1 <__builtin__.JEP65Proxy instance at 0x1015ce290>
2010-11-15 19:22:21-0500 [XmlStream,client] Activation requested for:  c99a1721d4ab7f28c495ea293e5d39729a2f1fb1
2010-11-15 19:22:21-0500 [XmlStream,client] Activating  c99a1721d4ab7f28c495ea293e5d39729a2f1fb1
2010-11-15 19:26:22-0500 [JEP65Proxy,2,172.25.0.28] Adding connection:  cbd648bcdc383bc6efd51168e2702be9b6623c28 <__builtin__.JEP65Proxy instance at 0x1015be200>
2010-11-15 19:33:04-0500 [JEP65Proxy,3,172.25.0.28] Adding connection:  3a865f876aea5c262b5aaba95718dd5ae2180dc0 <__builtin__.JEP65Proxy instance at 0x1015ce290>
2010-11-15 19:36:42-0500 [JEP65Proxy,4,172.25.0.28] Adding connection:  a96ccb76e14c9d8c39b17b6414240ed0c33ef497 <__builtin__.JEP65Proxy instance at 0x1015ced88>

Open in new window

0
 
nxnwCommented:
It would be more useful if you provided an excerpt that was restricted to a failed attempt to transfer a file (or at least identified what was actually happening during the various times shown in the above excerpt). I won't speak for anyone else but I sure can't interpret it without any context.

For instance, do the sections bracketed by "Service starting on 7777" and "Port 7777 Closed" represent a a failure? Were there successful transfers at the lines including "JEP65Proxy… Adding connection"?

If the log is not set to debug (for this purpose) that would also be helpful.
0
 
LIEconomyAuthor Commented:
How can I set the log to debug? Also only one transfer was successful, and that is the first one as it was LAN to LAN. Lines 54 to 66 are failed transfers
0
 
nxnwCommented:
Re: Logging - my mistake. I think its default is the equivalent of debug anyway.

Are you sure about the success and failures? Lines 58 to 63 look like a successful transfer between 172.25.0.28 and 172.25.0.24. Isn't 172.25.0.x your private network where the server is?

Please do this:
log out all iChat clients,
shut down and restart the iChat server
log in a local and remote iChat client
attempt a file transfer
provide the server and client logs from the iChat server restarting (client login for the clients) up to the failure.
0
 
nxnwCommented:
Just because people who provide help here do so without payment or reward, does not mean our time is worthless. It is inappropriate to solicit time and effort from people and then throw it away because you "have more pressing matters to attend to". We're all busy, Jack. If I knew you were unwilling to make a reciprocal effort, I would not have looked at your question.

Anyway, I hope you understand this perspective and are not inconvenienced by my future disinterest in your problems.
0
 
LIEconomyAuthor Commented:
I do appreciate your effort however I am spending too much time on this problem for an internal talk server. I wasn't sure if I should reward points if the question wasn't solved. I can if that is permitted.
0
 
LIEconomyAuthor Commented:
Thanks for all your help though.
0
All Courses

From novice to tech pro — start learning today.