On 5/9/06, Wendell Turner <[EMAIL PROTECTED]> wrote:
> On Tue, May 09, 2006 at 08:52:09PM +0200, Norman Rasmussen wrote:
> > On 5/9/06, Wendell Turner <[EMAIL PROTECTED]> wrote:
> > > What firewall
> > >ports need to be opened inbound and outbound?
> > 443 out, 1863 out, 8010 in (or whatever you're using).
>
> Ok, I think I have those ports open, yet:

and I forgot you'll need outgoing access to what ever port other MSN
clients use.  Maybe James could be nice and put in an option to make
all outgoing ft requests from the ftJabberPort, although I'm not sure
you listen and connect out on the same port at the same time, so it
might end up being an outgoing port range.

If you're using iptables can you not allow all outgoing traffic from
the pymsnt process? or the user you're running pymsnt as? (check the
owner match extension)

> When sending from inside to hotmail, pymsnt's log file shows the
> messages below[1]; Psi's Send File window shows 'Requesting...'
> and nothing happens on the MSN side.

unsure, James will have to comment.

> > >(I take it that
> > >means all of ns[12345].msft.net.?)
> > ? not sure what you mean with these.  msft.net isn't invloved with any
> > ft, socks or oob.
>
> 'dig hotmail.com' results in
>   ;; ADDITIONAL SECTION:
>   ns1.msft.net.  ...
>   ns2.msft.net.  ...
>   ns3.msft.net.  ...
>   ns4.msft.net.  ...
>   ns5.msft.net.  ...
> and so it seems that these 5 addresses are potential hotmail.com
> sites that need firewall holes to them.
for DNS yes, not for the MSN protocol.  If you're hosting DNS on the
same box then you're going to have to let _all_ dns traffic out unless
you use an upstream dns cache, otherwise pymsnt won't be able to
connect to jabber client if they provide a hostname as a stream
endpoint.

The transport hasn't really been designed to work with such
restrictive firewall conditions, but it seems that some people really
want to lock the transport's hosting box down.  I guess one way around
this would be for the transport to request for ports to be dynamically
unblocked as required, but I don't see how this could be regarded as
secure.

As a sanity check, would it be possible to set the firewall to allow
all incoming and outgoing during your testing, then at least you can
double-check that in fact you can send and receive files correctly. 
Once we know that all the ft settings are right, then we can start to
consider the firewall holes that need to be punched to make it work.

--
- Norman Rasmussen
 - Email: [EMAIL PROTECTED]
 - Home page: http://norman.rasmussen.co.za/
From [EMAIL PROTECTED]  Wed May 10 18:48:47 2006
From: [EMAIL PROTECTED] (Pedro Melo)
Date: Wed May 10 18:48:53 2006
Subject: [py-transports] More pyMSN tracebacks
Message-ID: <[EMAIL PROTECTED]>

Hi,

got the following tracebacks playing with file transfers and avatars.


[2006-05-10 19:39:12] Traceback (most recent call last):
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
log.py", line 56, in callWithLogger
             return callWithContext({"system": lp}, func, *args, **kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
log.py", line 41, in callWithContext
             return context.call({ILogContext: newCtx}, func, *args,  
**kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
context.py", line 52, in callWithContext
             return self.currentContext().callWithContext(ctx, func,  
*args, **kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
context.py", line 31, in callWithContext
             return func(*args,**kw)
         --- <exception caught here> ---
           File "/usr/lib/python2.3/site-packages/twisted/internet/ 
pollreactor.py", line 160, in _doReadOrWrite
             why = selectable.doRead()
           File "/usr/lib/python2.3/site-packages/twisted/internet/ 
tcp.py", line 351, in doRead
             return self.protocol.dataReceived(data)
           File "/usr/lib/python2.3/site-packages/twisted/protocols/ 
basic.py", line 221, in dataReceived
             why = self.lineReceived(line)
           File "/servers/pymsnt/src/tlib/msn/msn.py", line 825, in  
lineReceived
             try: handler(params.split(' '))
           File "/servers/pymsnt/src/tlib/msn/msn.py", line 2226, in  
handle_ANS
             self.loggedIn()
           File "/servers/pymsnt/src/tlib/msn/msnw.py", line 678, in  
loggedIn
             self._ready()
           File "/servers/pymsnt/src/tlib/msn/msnw.py", line 646, in  
_ready
             self.userJoined(user)
           File "/servers/pymsnt/src/tlib/msn/msnw.py", line 698, in  
userJoined
             d = self.sendAvatarRequest()
           File "/servers/pymsnt/src/tlib/msn/msnw.py", line 745, in  
sendAvatarRequest
             msnContacts = self.msncon.getContacts()
         exceptions.AttributeError: 'NoneType' object has no  
attribute 'getContacts'


[2006-05-10 19:39:03] Traceback (most recent call last):
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
log.py", line 56, in callWithLogger
             return callWithContext({"system": lp}, func, *args, **kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
log.py", line 41, in callWithContext
             return context.call({ILogContext: newCtx}, func, *args,  
**kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
context.py", line 52, in callWithContext
             return self.currentContext().callWithContext(ctx, func,  
*args, **kw)
           File "/usr/lib/python2.3/site-packages/twisted/python/ 
context.py", line 31, in callWithContext
             return func(*args,**kw)
         --- <exception caught here> ---
           File "/usr/lib/python2.3/site-packages/twisted/internet/ 
pollreactor.py", line 160, in _doReadOrWrite
             why = selectable.doRead()
           File "/usr/lib/python2.3/site-packages/twisted/internet/ 
tcp.py", line 351, in doRead
             return self.protocol.dataReceived(data)
           File "/usr/lib/python2.3/site-packages/twisted/protocols/ 
basic.py", line 232, in dataReceived
             return self.rawDataReceived(data)
           File "/servers/pymsnt/src/tlib/msn/msn.py", line 848, in  
rawDataReceived
             if not self.checkMessage(m):
           File "/servers/pymsnt/src/tlib/msn/msn.py", line 2190, in  
checkMessage
             if self._checkFileInvitation(message, info): return 0
           File "/servers/pymsnt/src/tlib/msn/msn.py", line 2118, in  
_checkFileInvitation
             raise NotImplementedError
         exceptions.NotImplementedError:



Best regards,
--
HIId: Pedro Melo
SMTP: [EMAIL PROTECTED]
XMPP: [EMAIL PROTECTED]

Reply via email to