| T.R | Title | User | Personal
Name | Date | Lines |
|---|
| 4563.1 | Re: Mirabilis ICQ Usage? | QUABBI::"stuart@nsl-too.pa.dec.com" | Stephen Stuart | Mon Mar 24 1997 01:28 | 31 |
| joelberman@hgovc.enet.dec.com wrote:
: Title: Mirabilis ICQ Usage?
: I would like to use ICQ from Mirabilis, http://www.mirabilis.com
:
: But it needs a few firewall things.
:
: 1. need to send packets via UDP port 4000, either through a proxy,
: mapped in the firewall, or just open 4000 for outgoing packets.
:
: 2. Need to establish a TCP link on a port above 1023, either through a
: hole or a proxy.
:
: Is there a gateway or proxy around that will do this for me?
Not only are the product's requirements for firewall access a security
risk, but the publishing of who uses what computer -- and even worse,
when they are using it or not -- is very much against security
policies.
Remember the rule popularly misquoted as "no email addresses on
business cards?" It was actually a rule against publishing the name of
a host to which you had access; addresses naming mail hubs were fine.
Stephen
--
- -----
Stephen Stuart stuart@pa.dec.com
Network Systems Laboratory
Digital Equipment Corporation
[posted by Notes-News gateway]
|
| 4563.2 | | teco.mro.dec.com::tecotoo.mro.dec.com::mayer | Danny Mayer | Mon Mar 24 1997 10:08 | 9 |
| > 1. need to send packets via UDP port 4000, either through a proxy,
> mapped in the firewall, or just open 4000 for outgoing packets.
>
You won't get this. UDP is not allowed due to security considerations.
You might get TCP if you can justify the usage. What is this software and
why might it be useful.
Danny
|
| 4563.3 | Why I may find it useful | HGOVC::JOELBERMAN | | Tue Mar 25 1997 00:01 | 22 |
| The software does a few things that are useful, but probably security
risks.
1. One can set up a list of names and the software will let you know
if they are on the net, or when they come on.
2. One can then easily chat, internet phone or video phone to those
people.
3. One can post a message to someone. (not any better than email)
#1 is the useful point. Being many time zones away from the GMA and
having Digital take away the DTN from home capabilities, and being that
some of my colleques are not great at returning phone calls or mail, it
is nice to be able to know when they log on. I can do the same thing
with finger or rwho if enabled and vaxphone, but this way is easier.
Of course they have to be running the ICQ agent for it to work. So it
would save the cost of many short phone calls to the US from HK by
enabling me to know when someone is on the system and possibly in their
office.
|
| 4563.4 | | teco.mro.dec.com::tecotoo.mro.dec.com::mayer | Danny Mayer | Tue Mar 25 1997 08:59 | 38 |
| > The software does a few things that are useful, but probably security
> risks.
>
> 1. One can set up a list of names and the software will let you know
> if they are on the net, or when they come on.
>
That could be nice.
> 2. One can then easily chat, internet phone or video phone to those
> people.
>
This is very unlikely to be supported. Even if it were TCP based
the bandwidth requirements would make this a network resource hog and
the bandwith problems that we have today would be magnified manyfold.
> 3. One can post a message to someone. (not any better than email)
>
Not needed. Email is just as good. What does it mean to post a message?
To where?
> #1 is the useful point. Being many time zones away from the GMA and
> having Digital take away the DTN from home capabilities, and being that
> some of my colleques are not great at returning phone calls or mail, it
> is nice to be able to know when they log on. I can do the same thing
> with finger or rwho if enabled and vaxphone, but this way is easier.
> Of course they have to be running the ICQ agent for it to work. So it
> would save the cost of many short phone calls to the US from HK by
> enabling me to know when someone is on the system and possibly in their
> office.
>
I understand the usefulness to you. If you are working outside the
Corporate network, why don't you use the AltaVista tunnel and be effectively
connected to the internal network? That's exactly what it's there for. As
far as I know AltaVista tunnel supports both UDP and TCP and if it doesn't
then maybe you can ask for an enhancement to the Tunnel software. It's
better than trying to ask for a hole in the firewall.
Danny
|