|
|
GET FETCH 5 FOR FREE! Fetch Softworks makes Fetch, the original Macintosh FTP client, free for educational and charitable use. Fetch 5.3 includes a new look and Leopard technology support. Apply today at <http://fetchsoftworks.com/edapply>! |
Punching a Hole for Back to My Mac
via email
Good article. Thanks Glenn. I'll work at getting BtMM to work using
your information. (Qwest DSL for one machine--older DSL modem/router;
cable (with Linksys wireless router) for the other.)
Neither port 443 nor port 4500 is a big surprise. 4500 is ipsec,
which we knew BtMM uses; 443 is https:, which seems like a good idea.
$grep 4500 /etc/services
ipsec-msft 4500/udp # Microsoft IPsec NAT-T
ipsec-msft 4500/tcp # Microsoft IPsec NAT-T
$grep ' 443/' /etc/services
https 443/udp # http protocol over TLS/SSL
https 443/tcp # http protocol over TLS/SSL
(Why the fancy grep search term for 443? Try it without the space and
slash--more than you want to know in the results.)
UPnP is evil. (My opinion, of course.) There's a version 2 coming,
which might turn out to be OK.
Because it can do far more than set up port forwarding on your router
at the behest of software. It can allow your software to make other
router configuration changes as well--almost without limit.
And everything your nice benign software can do to the router with it,
your unknown malware can also do.
And with most routers, the GUI interface doesn't show you any of the
things UPnP has done.
It's better to keep it off, and set up what you need by hand.
I don't know Apple's NAT-PMP--it could well be much less evil, but I
don't have access to it.
My feeling also is that if you aren't expecting to use Back to My Mac,
you should shut it down. (Which might well close holes opened via
UPnP, an advantage of using that.)
--John
Mark as Read
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
pobox.com
|
![[F]](/Images/i7/site.gif){kind=small}
TidBITS 
TidBITS TidBITS Talk Punching a Hole for Back to My Mac
