×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Security, hacker detection & forensics FAQ

MSN Messenger and ISA

How to allow for Video & Audio by Knutern
Posted: 25 Jul 04

Contrary to what have been said and written many times before, it is possible to allow for Video & Audio without the use of Q.931 and gatekeeper.

One of the things that are said most often are, that MSN Messenger Video works only if the firewall is Universal Plug & Play capable. As the ISA Server is not a UPnP firewall, it shouldn't work.

But it does. All you need is the ISA Firewall Client installed, create a protocol definition to be used for this sake, and a protocol rule which includes the newly created protocol definition and some more, change the firewall client configuration file.

Step by step
  1. Create a new protocol definition, and name it "MSN Messenger Video & Audio" for example:
    • Primary Connection: Port 1863, TCP, Outbound
    • Secondary Connections
      • Port Range From 5004 to 65535, UDP, Send Receive
      • Port Range From 6891 to 6900, TCP, Inbound
      • Port Range From 6891 to 6900, TCP, Outbound
      • Port Range From 6901 to 6901, TCP, Outbound
  2. Create a protocol rule to allow for this newly created protocol AND Net2Phone
  3. Edit the Firewall Client Properties (from within ISA Management or directly into the mspclnt.ini file). Older Messenger versions are called msmsgs, current version 6.2 is called msnmsgr. Add NameResolutionForLocalHost=E and RemoteBindUDPPorts=0,6901
The "NameResolutionForLocalHost=E" is used to tell what IP address to resolve. E=External IP Address of ISA Server, and "RemoteBindUDPPorts" specifies port(s) to bind remotely.

A collection of links that have helped me - and hopefully will help you out there too:
How To Add Support for MSN Messenger Net2Phone in ISA Server 2000
Firewall Client Program Settings for Configuration Files Like Wspcfg.ini

Back to Security, hacker detection & forensics FAQ Index
Back to Security, hacker detection & forensics Forum

My Archive

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close