Increased lag time in general computer activities and a dos of netmeeting services are indications of malicious tampering also check event logs for increased activity microsoft windows nt 40 and 2000 users are vulnerable to the original vulnerability and the variant using netmeeting 301. For purposes of configuring firewalls or for troubleshooting communications issues, it may be useful to know what tcp/udp ports exchange 2000 server and exchange 2000 conferencing server are using. Use of netmeeting via firewalls: when using netmeeting to establish a connection , which goes through a firewall, it will most probably be required to configure the firewall to allow the tcp/ip-ports used by netmeeting to pass through the firewall : list of ports used by netmeeting.
Port type direction for example, if you want to add port 389, you would enter the following settings: protocol name netmeeting 21 port 389 type tcp (default) direction outbound for tcp-only ports, click ok after adding information for each port for ports that require udp connections, continue with step 4. Port: this is the network port that the system service listens on for incoming network traffic this article does not specify which services rely on other services for network communication for example, many services rely on the remote procedure call (rpc) or dcom features in microsoft windows to assign them dynamic tcp ports. 1720 is netmeeting and h323 1863 is control streaming channel 5190 is also control stream and possibly chat a full post of your config would help see if there is something in there that is open vs false positive also as john mentioned, post the result of show control-plane host open-ports to see what exactly is open. You could set up port forwarding for all the netmeeting ports i think the sonicwall calls it public lan server or something where you put in the required ports, then the lan ip that you want all incoming packets to be routed to.
Netmeeting ports you will learn about netmeeting requirements for tcp and udp connections, as well as the ip ports needed to establish a netmeeting connection when you use netmeeting to call other users over the internet, several ip ports are required to establish the outbound connection. Video streaming these dynamically negotiated ports are selected arbitrarily from all ports that can be assigned dynamically netmeeting directory services require either port 389 or port 522, depending on the type of server you are using internet locservers (ulss), servers (ulss), developed for netmeeting 10, require port 522. When you use rpc with tcp/ip or with udp/ip as the transport, inbound ports are frequently dynamically assigned to system services as required tcp/ip and udp/ip ports that are higher than port 1024 are used. These cover registered, unregistered, and trojan ports - note that many ports have legitimate, required uses, even though people have also used them as trojan ports andrew daviel's network service query is a very nice port metasearch engine.
Tcp port 1720 is the h323 (video) call setup port after a client connects, the h323 server negotiates a new, dynamic udp port to be used for streaming data protocol: audio. To establish outbound netmeeting connections through a firewall, the firewall must be configured to do the following: pass through primary tcp connections on ports 389, 522, 1503, 1720, and 1731. For more information about the ports that are used by iis 40, by iis 50, and by iis 51, see microsoft knowledge base article 327859: inetinfo services use additional ports beyond well-known ports for information about ports in iis 60, see tcp/ip port filtering. (more information on ports used by netmeeting : knowledge base article q158623) to protect your system against attacks from the internet using one of these tcp/ip ports, you should install a personal firewall.
Microsoft netmeeting is a windows-based application that enables multi-user interaction and collaboration from a single pc over the internet or an intranet clients or gateways can connect directly with one another, if the destination ip address of the other client or gateway is reachable. To establish outbound netmeeting connections through a firewall, it must be configured to do the following: 1 pass-through primary tcp connections on ports 522, 389, 1503, 1720 and 1731 pass-through primary tcp connections on ports 522, 389, 1503, 1720 and 1731. All the ports you should need for everyday things like gaming and web surfing is ftp,ssh,telnet,smtp,dns,tftp,gopher,finger,http,kerb,pop3,nntp,netbios,snmp,bgp,irc,ldap,https,netmeeting,pptp,nat,quake now tease are just the names and if your looking for the numbers of the ports i listed up above you can go online wiki and find all the ports list. Port 1503 (tcp): microsoft netmeeting t120 data sharing port 1718 (udp): gatekeeper discovery § port 1719 (udp): gatekeeper ras (must be bi-directional) port 1720 (tcp) h323 call setup (must be bi-directional) port 1731 (tcp): audio call control (must be bi-directional) ports 3230-3235 (tcp/udp): signaling and control for audio, call, video and data/fecc.
Netmeeting is a brilliant piece of software we use it at work all the time, for connecting to computers across the world or showing users in other countries how to do stuff. This is where you enter the name of the ils server you wish to log into when starting netmeeting you have to be logged into a ils server to be able to place and receive calls the problem is that all the popular ils servers that are listed by default in netmeeting are hopelessly clogged with people and it is hard to get in during peak times. Microsoft netmeeting and firewalls when you use netmeeting to call other users over the internet, several ip ports are required to establish the outbound connection if you use a firewall to connect to the internet, it must be configured so that the following ip ports are not blocked. It is also necessary that you port forward each of the netmeeting ports/protocols to the inside ip of the the netmeeting client this is a problem with a firewall because both h323 call control and h323 streaming use random port numbers.