cor - 02.02.06 2:06 pm

The matrix of ports for iChat looks like this..

gateway (router) ports required:
5060: UDP
5190: UDP + TCP
5220: TCP
5222: TCP
5678: UDP
16384-16403: TCP

If you have a local firewall (on the computer) also open these ports, (only on the puter):
5297: UDP
5298: UDP + TCP
5353: UDP


Make rules like this (copy & paste in a telnet session)

firewall:
---------
create ipf rule entry ruleid 5060 ifname public dir in act accept transprot eq udp destport eq num 5060 seclevel high medium low
create ipf rule entry ruleid 5190 ifname public dir in act accept transprot eq tcp destport eq num 5190 seclevel high medium low
create ipf rule entry ruleid 5191 ifname public dir in act accept transprot eq udp destport eq num 5191 seclevel high medium low
create ipf rule entry ruleid 5220 ifname public dir in act accept transprot eq tcp destport eq num 5220 seclevel high medium low
create ipf rule entry ruleid 5222 ifname public dir in act accept transprot eq tcp destport eq num 5222 seclevel high medium low
create ipf rule entry ruleid 5678 ifname public dir in act accept transprot eq udp destport eq num 5678 seclevel high medium low
create ipf rule entry ruleid 16384 ifname public dir in act accept transprot eq tcp destport range 16384 16403 seclevel high medium low

NAT:
----
create nat rule entry ruleid 5060 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 5060 destportto num 5060
create nat rule entry ruleid 5190 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 5190 destportto num 5190
create nat rule entry ruleid 5220 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 5220 destportto num 5220
create nat rule entry ruleid 5222 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 5222 destportto num 5222
create nat rule entry ruleid 5678 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 5678 destportto num 5678
create nat rule entry ruleid 16384 rdr lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 16384 destportto num 16403



If they have a 205 at their end, they will need to enter these rules, too.

Lastsly, if you still have issues (and only then) try this (in telnet) ..

delete alg port portno 5060

;o)