• 所有社区 - 中文
    • 所有社区 - 中文
    • 论坛
    • 创意
    • 博客
高级

不是您要找的? 咨询专家!

此论坛帖文需要解决方案。
好评0

Port forward ranges

Talking to Norton Core support I was told the port forwarding feature does not handle port "ranges".  However, when I look at Settings \ Network \ Port Forwarding....the list reads "Port 16600 > 16998"  This indicates to me it has opened ports greater than 16600 and less than 16998.  Also, to make it look this way, I had to set port 16998 as the internal port and port 16600 as the external port. 

None of this seems logical.  Instead of what Norton Core is calling an internal port and an external port, do they really mean something different?  What good does it do it you only want to allow outgoing packets to also open the incoming port?

Do I have the words outgoing port (Core's name) and allowing outgoing packets confused?  Same with Incoming port and allowing incoming packets?

I am doing this for my VOiP phone system because the service provider prefers their device be placed before the router.  If placed after the router, they suggest opening a certain range of ports.

Please help me understand. 

回复

好评0

Re: Port forward ranges

Hello Mammondee. Who is your VOIP provider? If you have VOIP through your ISP and your ISP is dependent on their device to manage your VOIP services then DHCP MUST remain enabled on the ISP device for that service to function. I have FIOS with VOIP and TV services, that is my setup. Wifi disabled on my ISP router, all previous connections removed except the TV boxes and local host to the internet. That router manages DHCP (IP address assignment) for my TV and phone services. Core doesn't manage ISP services only devices connected to it. If your VOIP is not through your internet provider what service type is it?

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

My TSP is PhonePower (completely independent of my ISP).  I have an Obi302 ATA that has router functions because PhonePower prefers you put their device before the router.  I have not done that.  I go from my modem to the Core to the Obi302.  I have changed the configuration settings on the OBi302 to function is bridge mode instead of router mode.  This disables the DHCP on the LAN side.  The Core assigns all IP addresses.

With that information, does the Core allow port forwarding ranges or not?  If not, why does the listing show in such a way as to be greater than / less than?  Why do you have to input the higher port number as the incoming port and the lower port number as the outgoing port? 

好评0

Re: Port forward ranges

YOU assign the ports where indicated on the Core app following the OEM suggestions. Although I am a Core owner I don't know of port range limitations on Core. I would enable UPnP on the Core app for that device. That should automatically allow the device to assign the ports it needs. Have you followed these topics of discussion from the manufacturer? Have you contacted their support for assistance? Core support personnel aren't always the sharpest tools in the shed about some things.

https://www.phonepower.com/wiki/Setting_up_your_Obihai

https://www.phonepower.com/wiki/Obihai_set_up

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

Thank you for your reply.  However, I still don't feel I have an answer.  Let me just ask one question at a time.  When you are setting up port forwarding, Why does it insist on both an internal port and an external port.  What if I only want to open an internal port:?

好评0

Re: Port forward ranges

Both incoming and outgoing ports are REQUIRED for a device to function correctly on a network. Thus the reason port forwarding has always needed both port assignments. As previously posted, if you enable UPnP on Core and add a device it will automatically assign ports and create the rule for you.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

I prefer to manually add the ports if possible because it is more secure.   Even the Core app says sometimes Norton will ask us to disable UPnP and manually enter the port forwarding.  OBi and Phonepower specifically have us forward certain ports if we have any trouble with quality.  Lastly, I am truly interested in how this works and want to learn.

I understand that both incoming and outgoing ports are needed for a device to function properly.  However, I never thought the incoming and outgoing ports would necessarily be the same port.... if so, then why ask for both ports in the app?  Or put another way, what if  I only want to open a port for outgoing data...(from my device to the internet), but not allow traffic in on that same port?  

Do I understand correctly that what Norton is calling an "Internal Port" is for outgoing data and the "External Port" is for incoming traffic? 

好评0

Re: Port forward ranges

Do I understand correctly that what Norton is calling an "Internal Port" is for outgoing data and the "External Port" is for incoming traffic?

No!! You have them backwards. The simplest way to setup your port forwarding is to follow the ports listing in the guide from the manufacturer which I posted earlier. Also, setting UPnP on Core does NOT make your devices vulnerable. Quality shouldn't have anything to do with the ports that are used in general but more so dependent on the strength of the bandwidth your ISP provides. Core is designed to protect ALL the devices connected to it from exploits. I would set UPnP to do the initial setup and go from there. If there are quality issues which there shouldn't be, you can always "manually edit" the ports used in the rules that are created. 

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

"The simplest way to setup your port forwarding is to follow the ports listing(link is external) in the guide from the manufacturer which I posted earlier."

Please be assured, prior to my questions here on the forum, I had read everything I can on the PhonePower website (including the links you provided), called PhonePower, searched extensively on the OBi website, and quizzed their forum.  I am not looking for someone else to do the work for me.  I am only asking how the Norton Core handles port forwarding, through clarification as to

  1. Why they are asking for an "internal port" and an "external port" within the same rule,
  2. Will the Core handle port ranges, 
  3. The app's confusing description of their ports. 
  4. To get the Core to accept the port range needed, I have to put the higher number port in as "Internal Port" and the lower number port as the "External Port".....makes no sense unless range port forwarding is just not supported..

Through the years, (from DOS to Windows 10 Pro)...I remember port forwarding instructions to include ranges such as what is suggested from PhonePower and OBi.  The ports listing from Obitalk are as follows:   Please take this information and explain to me just how you would enter it into Norton Core's app.  Please note the "ranges" and that only one port needs open to "Allow Incoming".  All the ports but that one are for "Allow Outgoing".

from:  https://mobile.obitalk.com/info/faq/Troubleshooting-sec/ports-to-keep-open-on-my-router

In order for your OBi to be able to send packets w/o interruption, please configure your router as follows: 
Allow Outgoing: 
TCP Ports: 6800, 5222, 5223 
UDP Ports: 5060, 5061, 10000 to 11000, 16600 to 16998, 19305 
Allow Incoming on UDP Port: 10000

"No!! You have them backwards"

As to my confusion with the data direction of the Core's titled ports, my information came from a detailed description by a Norton Core telephone support representative as well as the app's description of:  "External Port:  Users on the internet will use this port number to access the server on your network.  Ensure that this port number does not change"  This seems to me to be a description of an incoming port?  Can you explain?

Couple that with PhonePower's and Obitalk's Port listing indicating "Allow Outgoing" and "Allow Incoming".  I think allow incoming traffic is "phone calls and faxes in" which in my mind would be an external port. I think allow outgoing traffic is phone calls and faxes out which in my mind would be an internal port.  

"Also, setting UPnP on Core does NOT make your devices vulnerable."

The Core's app description of UPnP says:  "By default, Norton Core does not allow UPnP devices to make themselves discoverable on the network and blocks all incoming requests.  This is because UPnP compatible devices are prone to malicious attach due to security vulnerabilities in the UPnP protocol...."  "....Turning on UPnP affects your network security score.  To improve your security score, Norton Core may suggest that you turn off UPnP.  You can set up port forwards manually in that case."   We can just say you disagree with Norton on this issue.

好评0

Re: Port forward ranges

Having properly answered your questions it appears you already have the answers. Lets ask the community to chime in.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

With all due respect, you have not answered any of my questions. You told me go forget port forwarding and use UPnP instead.....or to follow the manufacturer's suggestion on setting up the ports. Trying to follow the manufacturer' s port forwarding instructions is what caused my questions, which I still do not have the answers to. I have been hoping others in the community with more experience in port forwarding using the Core or would chime in. Thank you for your efforts.
好评0

Re: Port forward ranges

An admin answered this question about port ranges some time ago. Took awhile to find the thread. The current Core firmware has NOT addressed the issue since, mostly due to the security design of Core.

https://community.norton.com/en/comment/7568611#comment-7568611

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.278 on Android 1.93
好评0

Re: Port forward ranges

Thank you for the link.  I had read that earlier, but could not remember where.  That post was almost 1 1/2 years ago, and I was hoping port forwarding had been addressed since then.  Does support ever troll the forums and chime in from time to time?  

Thanks again for your time. 

好评0

Re: Port forward ranges

Hello

Norton Employees occasionally will post in the Forums. They will have red badges under their names which will say Symantec Employee or Admin. They do sometimes read posts without posting also.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 270 I E 11 Chrome latest one

This thread is closed from further comment. Please visit the forum to start a new thread.