Firewalls
& Ports:
With iClose-Up the following Ports need to be open,
or the following Permissions need to be set:
You might also want to read Options,
Proxy, Proxy Servers, Internet Connection Sharing and Routers.
If you are using a “Personal Firewall” then you can read
about how to configure some of the most popular Personal Firewalls below, or
configure the firewall yourself with the following information in Required Ports, and Permissions
below.
Windows XP™ Version RC-1
Black Ice™ Version 2.5.ch
Mcaffee Firewall™ Version 2.11.002.0
Norton Internet Security 2001™ Version 2.5.30.0
ZoneAlarm™ Version 2.1.44
Required Ports:
If you are using a Firewall and are not using a Proxy Server
or Internet Connection Sharing, then the following Ports will need to be open.
Port:
2338 both TCP and UDP for inbound and outbound traffic
(used by iClose-Up).
Port:
3039 UDP for inbound and outbound traffic (used by
iClose-Up).
Port: 389
TCP for inbound and outbound traffic (used for Close-Up Internet Name
Server (CINS)).
Port: 53 UDP for inbound and outbound traffic (used for DNS (Domain Name
Service) to locate CINS on the internet, this port is also used by your web
browser).
If you are using a Firewall on the Proxy Server
(Windows NT/2000) or Internet Connection Sharing (Windows 2000)
computer, with iClose-Up Proxy software, then the following Ports will
need to be open.
Ports: 53701 through 53750 both TCP and UDP for
inbound and outbound traffic (used by iClose-Up).
Port:
2338 UDP for outbound traffic (used for Close-Up
Internet Name Server (CINS)).
Port:
3039 UDP for inbound and outbound traffic (used by
iClose-Up).
Port: 389
TCP for inbound and outbound traffic (used for Close-Up Internet Name
Server (CINS)).
Port: 53 UDP for inbound and outbound traffic (used for DNS (Domain Name
Service) to locate CINS on the internet, this port is also used by your web
browser).
If you are using a Firewall in front of a computer on a
network that is using a Route Table, a NAT, a Mapping or Port Forwarding scheme
to associate Ports with IP addresses of iClose-Up computers then the following
Ports will need to be open.
All Ports you associated
with IP addresses of iClose-Up computers, both TCP and UDP for inbound and
outbound traffic.
Port:
2338 UDP outbound traffic (used for Close-Up
Internet Name Server (CINS)).
Port:
3039 UDP for inbound and outbound traffic (used by
iClose-Up).
Port: 389
TCP for inbound and outbound traffic (used for Close-Up Internet Name
Server (CINS)).
Port: 53 UDP for inbound and outbound traffic (used for DNS (Domain Name
Service) to locate CINS on the internet, this port is also used by your web
browser).
Minimum
Ports:
If you want to have the minimum number of ports open then you
will have to connect between iClose-Up computers on the Internet using IP
addresses and not use Close-Up Internet Name Server (CINS). The following Port will need to be open.
Port:
2338 both TCP and UDP for inbound and outbound
traffic (used by iClose-Up). Or if you
reassign 2338 to another port (in the iClose-Up Proxy tab in the iClose-Up
Options section) that new port needs both TCP and UDP for inbound and outbound
traffic, open.
If your firewall will let you set permissions for specified
executables then instead of setting the Required ports as stated above you can
optionally set the permissions for the following eight iClose-Up related
executables:
ICloseUpServer.exe has to have TCP and UDP enabled
both In and Out, unrestricted for all ports.
iCloseUpClient.exe has to have TCP and UDP enabled both In
and Out, unrestricted for all ports.
Conf.exe has to have TCP and UDP
enabled both In and Out, unrestricted for all ports.
CupExplorer.exe has to have TCP enabled both In
and Out, unrestricted for all ports.
Cuptray.exe has to have TCP enabled both
In and Out, unrestricted for all ports.
MakeScript.exe has to have TCP enabled both In
and Out, unrestricted for all ports.
EditScript.exe has to have TCP enabled both In
and Out, unrestricted for all ports.
RunScript.exe has to have TCP enabled both In
and Out, unrestricted for all ports.
Setup for Windows XP™ Version RC-1
Follow the directions below, note capitalization is not
important.
How to change Windows XP™ Firewall options
This document outlines how to change the firewall built into Windows XP™ to either disable it completely for an Internet connection or to configure XP to allow iClose-Up through it.
DISABLING Windows XP™
Firewall option (on the iClose-Up
computer you are connecting into):
1.
Click the START button
2.
Point at Connect To
3.
Right-Click your Internet connection and select Properties
4.
Click the Advanced tab
5.
Uncheck the Internet Connection Firewall option
If you would rather keep the Firewall option enabled but
instead make a rule to allow iClose-Up to pass through it, follow the steps
outlined here.
1.
Click the START button
2.
Point at Connect To
3.
Right-Click your Internet connection and select Properties
4.
Click the Advanced tab
5.
Click the Settings button located at the bottom right
of the screen
6.
Click the Add button
7.
In the ‘Description of service’ field enter iClose-Up TCP
8. In the ‘Name
or IP address’ field enter the NetBIOS name or IP address of the computer
iClose-Up is running on
· If you are
using iClose-Up on the same Windows XP machine as the Internet connection with
the Firewall option, complete the Computer Name option for step (8)
· If you are
using iClose-Up on a machine on the network that is using Internet Connection
Sharing through the Windows XP machine with the Internet connection, complete
the IP address option for step (8)
To find the Computer Name of
the machine running iClose-Up, perform these steps on the iClose-Up machine
a. Right-click the red iClose-Up triangles near the system clock on the lower right corner of the computer screen
b.
Select iClose-Up Main Screen
c.
Click Help at the top of the window and select View
Computer Name
d.
The computer name is the text listed in the ‘The Computer
Name for this computer is: <computer
name>’ field
To find the IP address of
the computer running iClose-Up click
here
9.
In the ‘External Port number for this service’ field enter
the port iClose-Up is configured to use (default is 2338)
To find the port iClose-Up is configured for follow these
steps on the iClose-Up machine
a.
Double-Click the red iClose-Up triangles near the system
clock on the lower right corner of the computer screen
b.
Click the Options button
c.
Select the Proxy tab
d.
The port iClose-Up is configured on is listed in the
‘iClose-Up Port Number for this computer’ field
*IMPORTANT NOTICE: If the box ‘This Computer is behind a
Windows Proxy Server using iClose-Up Proxy Software’ is checked, you will need
to create a different set of rules. Click here
to get instructions.
10.
Enter the same number found in step (9) in the
‘Internal Port number for this service’ field
11.
Select the TCP option
12.
Click the OK button
13.
Repeat steps (6) through (12) with the
exception of substituting iClose-Up UDP in step (7) and selecting
UDP in step (11)
Setup for Black
Ice Version 2.5.ch
Follow the
directions below, note capitalization is not important.
How to set up Black Ice for iClose-Up.
This document outlines how to setup the popular firewall Black Ice to allow iClose-Up to work through it on the Internet.
1. Right click
the BlackIce icon in the system tray (by the clock)
2. Left click
“Edit BlackICE Settings”
3. Left click
the Protection tab
4. Select “Cautious”
5. Click OK
Setup for Mcaffee
Firewall™ Version 2.11.002.0
Follow the
directions below, note capitalization is not important.
How to set up Mcaffee Firewall™ for iClose-Up.
This document outlines how to setup the popular firewall Mcaffee Firewall to allow iClose-Up to work through it on the Internet.
Mcafee Personal Firewall works by
analyzing the traffic to the Internet from programs on your computer. It will then ask if you want to allow these
programs to have access to the Internet or receive data from the Internet. You can allow or deny this access. IClose-Up requires that a few files be
allowed access to the Internet to function fully. When the Mcaffee Firewall™ software asks if you will allow these
files to communicate or not you must select ‘Yes’. These files are…
CUPTRAY.EXE
ICLOSEUPSERVER.
ICLOSEUPCLIENT.
CONNECTLIST.EXE
CUPEXPLORER.EXE
MAKESCRIPT.EXE
EDITSCRIPT.EXE
RUNSCRIPT.EXE
ICUPSUPPORT.EXE
CONF.EXE
NOTE* Many functions of the
iClose-Up communication layer are time dependant. If it is the first time you are using one of the above files and
you are prompted to allow the communication or not, the data is being held
until you allow it. This may cause some
errors with iClose-Up. After you have
selected to allow the file to communicate, Mcaffee Firewall™ will remember this
and allow the data to travel unimpeded from that point on. If you get an error after making a change
you may have to retry the command you just tried to execute. In some rare instances iClose-Up will
continue to show errors every time you try to execute an iClose-Up
command. At this point you need to
restart your computer and iClose-Up will from now on function properly with the
firewall’s new rule in place.
Setup for Norton
Internet Security 2001 Version 2.5.30.0
Follow the
directions below, note capitalization is not important.
How to set up Norton Internet Security 2001 for iClose-Up.
This document outlines how to setup the popular firewall Norton Internet Security 2001 to allow iClose-Up to work through it on the Internet.
Click
Options
If
you have Norton Anti-Virus also installed you will need to select ‘Internet
Security’
Click
Advanced Options
Click
the tab “Firewall”
Click Add
Enter
“iCloseUpServer” in the name field
Select
“Either” in the “Direction” field
Select
“TCP or UDP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “iCloseUpServer” then click Open
Click
OK
Click
Add
Enter
“iCloseUpClient” in the name field
Select
“Either” in the “Direction” field
Select
“TCP or UDP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “iCloseUpClient” then click Open
Click
OK
Click
Add
Enter
“Cuptray” in the name field
Select
“Either” in the “Direction” field
Select
“TCP or UDP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “Cuptray” then click Open
Click
OK
Click
Add
Enter
“Connectlist” in the name field
Select
“Either” in the “Direction” field
Select
“TCP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “Connectlist” then click Open
Click
OK
Click
Add
Enter
“CupExplorer” in the name field
Select
“Either” in the “Direction” field
Select
“TCP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “CupExplorer” then click Open
Click
OK
Click
Add
Enter
“MakeScript” in the name field
Select
“Either” in the “Direction” field
Select
“TCP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “MakeScript” then click Open
Click
OK
Click
Add
Enter
“EditScript” in the name field
Select
“Either” in the “Direction” field
Select
“TCP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “EditScript” then click Open
Click
OK
Click
Add
Enter
“RunScript” in the name field
Select
“Either” in the “Direction” field
Select
“TCP” in the “Protocol” field
Select
“Application shown above”
Click
the Browse button
Browse
to your iClose-Up install directory (default is c:\program files\iclose-up)
Select
the file “RunScript” then click Open
Click
OK
Click
OK to leave the “Advanced Options”
Click OK to leave the “Personal Firewall Options”
Setup for
ZoneAlarm™ Version 2.1.44
Follow the directions below, note capitalization is not
important.
How to set up ZoneAlarm™ for iClose-Up.
This document outlines how to setup the popular firewall ZoneAlarm™ to allow iClose-Up to work through it on the Internet.
ZoneAlarm takes a “reactive” approach to setting up programs to work through it. This means instead of changing settings in ZoneAlarm™ then running your programs through it, you first run your programs and let ZoneAlarm™ make its settings according to what the program you are running is trying to do. There are a few different components to iClose-Up that ZoneAlarm™ must see operating and therefore set up rules for to allow full functionality. These components are…
1.
ICLOSEUPCLIENT.EXE
This is used by iClose-Up list and
chat operations as well as handling outgoing connections.
2.
iCloseUpServer Module
This is used by iClose-Up Internet
registration services as well as handling incoming connections.
3.
iClose-Up Connection List
This is used to browse and
communicate with connected machines.
4.
iClose-Up Tray Icon
This is used in regulating file
transfers and connected machines.
5.
iClose-Up Explorer
This is used by iClose-Up as the
side-by-side Explorer view windows for client and server side browsing.
6.
iClose-Up Script Creator
This is used to create scripts.
7.
iClose-Up Script Editor
This is used to edit previously
created scripts.
8.
iClose-Up Email Support
This is used to send support email
to techsupport@norton-lambert.com
for iClose-Up support.
9.
Windows™ Netmeeting™
This is used for remote control
operations.
After ZoneAlarm™ and iClose-Up have been installed there is nothing you need to do to set up ZoneAlarm™ other than checking the Remember the answer each time I use this program box and selecting Yes when ZoneAlarm™ prompts you to allow the above mentioned applications access to the Internet. The only exception to this is the iCloseUpServer Module. Before you can use this module and accept incoming connections you must force the module to make traffic across the Internet so ZoneAlarm™ can see it. You do this by right clicking the red triangles in the lower right of your screen and selecting Internet Visibility and Incoming Access, and checking the This computer is visible on the Internet box then hitting OK. If the This Computer is visible on the Internet box is already checked, uncheck it and repeat this step but this time putting the check in. This will cause the iCloseUpServer Module to register you on the Internet and in doing this ZoneAlarm™ will ask you if you want to allow access to the Internet for this module in which you will select the Remember the answer each time I use this program box and select Yes. Now you must tell ZoneAlarm™ to allow this module to accept “incoming” connections as well. This is done by opening the ZoneAlarm™ program, selecting the Programs button, selecting the iCloseUpServer Module entry, and checking both boxes in the Allow Server column.