<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7655.8">
<TITLE>Omniorb - working through firewall question</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#1F497D" FACE="Calibri">Hi All</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We are using omniorb 4.0.7 for a client / server application and we have used endpoints with ports, so that it can help communicate across FIREWALL.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We would like to restrict all CORBA ports to a range of 2800 – 2900. </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Recently this solution failed to work in a particular customer site because they blocked all source and destination ports outside the range.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We configured a network firewall, blocked all destination ports except 2800-2900.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We see that CORBA is using RANDOM Source ports.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Given below is the output of the FIREWALL Log.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#000000" FACE="Calibri">Date Time Action Source Destination Duration Bytes Sent Bytes Received Application </FONT></SPAN><SPAN LANG="en-us"><BR>
<FONT COLOR="#000000" FACE="Calibri">2/27/2012 6:28:32</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">Permit 192.168.1.11:50368 172.16.1.11:2809 1799 sec </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">950 791 </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">TCP Port 2809 </FONT></SPAN><SPAN LANG="en-us"><BR>
<FONT COLOR="#000000" FACE="Calibri">2/27/2012 5:51:04</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">Permit 192.168.1.11:50983 172.16.1.11:2809 121 sec</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">1090 861 </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">TCP Port 2809 </FONT></SPAN><SPAN LANG="en-us"><BR>
<FONT COLOR="#000000" FACE="Calibri">2/27/2012 5:48:48</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">Permit 192.168.1.11:50979 172.16.1.11:2809 85 sec </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">1090 861 </FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#000000" FACE="Calibri">TCP Port 2809 </FONT></SPAN><SPAN LANG="en-us"><BR>
</SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We are trying to reach a destination 2809 and we are using the PORT as part of endpoint, but we see internally, source ports > 50000 are being used.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Is there a way we can control source ports?</FONT></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Regards</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Sundari.</FONT></SPAN></P>
</BODY>
</HTML>