FirewallWizards
[Top] [All Lists]

[fw-wiz] TFTP (Was: Re: firewall-wizards Digest, Vol 10, Issue 9)

To: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Subject: [fw-wiz] TFTP (Was: Re: firewall-wizards Digest, Vol 10, Issue 9)
From: Carson Gaspar <carson@taltos.org>
Date: Tue, 20 Feb 2007 21:54:44 -0800
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.icsalabs.com
In-reply-to: <1897E92A96C47648A6574CB9A51C6407015725FF@SEBEV1PW.graybar.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <1897E92A96C47648A6574CB9A51C6407015725FF@SEBEV1PW.graybar.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1) Gecko/20061025 Thunderbird/2.0b1pre Mnenhy/0.7.4.0
St John, Richard wrote:
> One of the problems we had was that TFTP can be both UDP and TCP. When
> VOIP was initiated {we run phones on remote sites through our VPNs for
> config} we had the problems you described, it was not until we noted our
> illustrious new firewall admin had opened TCP 69 and not UDP69. Once
> that was opened to the remote networks, everything started to work fine.
> Our firewall logs show that the Cisco & Mitel phones all were trying to
> pull on UDP 69

No. TFTP is UDP only (and a horrid port-changing lockstep UDP protocol 
at that - writing an app proxy for it was... interesting).

-- 
Carson
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>
  • [fw-wiz] TFTP (Was: Re: firewall-wizards Digest, Vol 10, Issue 9), Carson Gaspar <=