View Single Post
Old 02-06-2008, 10:16 PM   #4
Edbert
Junior Member
 
Join Date: Feb 2008
Posts: 1
Default similar issue

I am running an ASA 5500 at home and have created an outbound rule similar to the one I use for TeamSpeak but it is not working. I have tried using both tcp and udp on the port I use in the client for the server (ventrilo3.ecgnetwork.com on port 4186) to no avail. Right now I have all IP enabled to that host (69.31.96.158) but cannot connect.

Here's the lines from the config:
access-list inside_out extended permit udp any host TEAMSPEAK eq 8066
access-list inside_out extended permit ip any host Ventrillo

The definitions of the names:
name 208.100.9.170 TEAMSPEAK
name 69.31.96.158 Ventrillo

And whenever I try to connect my syslog lights up with the following:
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:72.51.46.31/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:70.85.110.242/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:74.54.61.194/6100 by access-group "inside_out" [0x0, 0x0]
Deny udp src inside:x.x.x.x/1407 dst outside:64.34.178.178/6100 by access-group "inside_out" [0x0, 0x0]

===============

So what are all these hosts on 6100, and do they HAVE to be opened or is that a server setting?

Note, I am not getting any hits on port 5000.

Are you saying that 6100 outbound should be opened to the entire internet?

Last edited by Edbert; 02-06-2008 at 10:24 PM.
Edbert is offline