Configuring a PORT problem, or firewall

Message boards : Number crunching : Configuring a PORT problem, or firewall
Message board moderation

To post messages, you must log in.

1 · 2 · 3 · 4 . . . 8 · Next

AuthorMessage
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 196447 - Posted: 27 Nov 2005, 11:19:23 UTC
Last modified: 27 Nov 2005, 11:22:19 UTC

We now have two threads at the help desk with what are seeming to me to be Identical. Both can tracert both servers at berkeley successfully but can't attach. Firewall are OFF in both. both have tried several boinc versions, including the latest. I am "assuming" it to be a port issue, but I'm not good with ports.
neither can attach to seti

One thread is Boinc connection error 182, the other is Help me Please......

help please
ID: 196447 · Report as offensive
Profile UBT - Halifax--lad
Volunteer tester
Avatar

Send message
Joined: 13 Dec 00
Posts: 433
Credit: 13,900
RAC: 0
United Kingdom
Message 196452 - Posted: 27 Nov 2005, 11:23:42 UTC

Not my speciality unfortunatly although all these Q&A's are helping me get a better understanding of ports/proxies etc
Join us in Chat (see the forum) Click the Sig


Join UBT
ID: 196452 · Report as offensive
Ron Roe
Volunteer tester

Send message
Joined: 28 Feb 02
Posts: 156
Credit: 24,124
RAC: 0
United States
Message 196563 - Posted: 27 Nov 2005, 14:23:29 UTC

Tony

In the thread 'Help me please...' I mentioned that the person should download the freeware program - TcpView available at Sysinternals that he could use.

Have them save the info to disk and then copy and paste to msg board. It might help to diagnose the problem.
ID: 196563 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 196598 - Posted: 27 Nov 2005, 14:55:46 UTC

THere is another thread with the same issue, I wrote an email to Rom, asking for help with these three.
ID: 196598 · Report as offensive
Profile Tigher
Volunteer tester

Send message
Joined: 18 Mar 04
Posts: 1547
Credit: 760,577
RAC: 0
United Kingdom
Message 196600 - Posted: 27 Nov 2005, 15:00:34 UTC - in response to Message 196598.  

THere is another thread with the same issue, I wrote an email to Rom, asking for help with these three.


Tony
Do they have the SSL port open too as this is needed now for authentication.

ID: 196600 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 196601 - Posted: 27 Nov 2005, 15:01:58 UTC

ssl port?

see why I"m asking for assistance???

tony
ID: 196601 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 196602 - Posted: 27 Nov 2005, 15:02:52 UTC

If someone could figure out one of these, we could probably fix the others.
ID: 196602 · Report as offensive
W-K 666 Project Donor
Volunteer tester

Send message
Joined: 18 May 99
Posts: 19741
Credit: 40,757,560
RAC: 67
United Kingdom
Message 196603 - Posted: 27 Nov 2005, 15:04:29 UTC - in response to Message 196601.  
Last modified: 27 Nov 2005, 15:06:50 UTC

ssl port?

see why I"m asking for assistance???

tony


Tony
Google says its 443

[edit] ssl = Secure Sockets Layer [/edit]
ID: 196603 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 196610 - Posted: 27 Nov 2005, 15:11:11 UTC

Tigher or someone with access to available proxies sites, can you go here and recommnend a proxy site for this guy to try?
ID: 196610 · Report as offensive
Profile Tigher
Volunteer tester

Send message
Joined: 18 Mar 04
Posts: 1547
Credit: 760,577
RAC: 0
United Kingdom
Message 196614 - Posted: 27 Nov 2005, 15:14:58 UTC - in response to Message 196601.  
Last modified: 27 Nov 2005, 15:39:26 UTC

ssl port?

see why I"m asking for assistance???

tony

Its port 443 used for secure transmissions (SSL= Secure Socket Layer = encryption). Used for authentication now since 5.x.x I recall from the _dev mails. So add it to 80, 1043 the 31416 or7 cant remember. As for helping Tony doubt I can because [editor]....................................................[/editor] so I can only help in emergencies I guess. That's why I have been missing these last 5/6 weeks.
Cheers



ID: 196614 · Report as offensive
Profile Tigher
Volunteer tester

Send message
Joined: 18 Mar 04
Posts: 1547
Credit: 760,577
RAC: 0
United Kingdom
Message 196618 - Posted: 27 Nov 2005, 15:20:41 UTC - in response to Message 196610.  

Tigher or someone with access to available proxies sites, can you go here and recommnend a proxy site for this guy to try?

Tony
I posted my proxy page with all the links to addresses to help him. Hope it works for him.


ID: 196618 · Report as offensive
1mp0£173
Volunteer tester

Send message
Joined: 3 Apr 99
Posts: 8423
Credit: 356,897
RAC: 0
United States
Message 197110 - Posted: 27 Nov 2005, 22:30:44 UTC - in response to Message 196447.  

We now have two threads at the help desk with what are seeming to me to be Identical. Both can tracert both servers at berkeley successfully but can't attach. Firewall are OFF in both. both have tried several boinc versions, including the latest. I am "assuming" it to be a port issue, but I'm not good with ports.
neither can attach to seti

One thread is Boinc connection error 182, the other is Help me Please......

help please

Tony,

My first question is: can he "browse" to http://setiboinc.ssl.berkeley.edu/ and/or http://setiboincdata.ssl.berkeley.edu/?

These should get "403 Forbidden" errors, but it means that he or she can reach the servers themselves.

Ports aren't magical. It seems to me that they've also been covered reasonably well in this thread.

-- Ned
ID: 197110 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 197137 - Posted: 27 Nov 2005, 22:56:55 UTC

Ned, at this point there are 4 affected users. All have firewall off, all can ping and traceroute both servers. One stated that ports 443, 80, 1043, and 31416 were open both ways. and still couldn't attach.

This is in the mesage log of all:

27/11/2005 21:41:45||Fetching config info from http://setiathome.berkeley.edu/get_project_config.php
27/11/2005 21:41:47||Missing account key
27/11/2005 21:42:03|http://setiathome.berkeley.edu/|Master file download succeeded
27/11/2005 21:42:04|http://setiathome.berkeley.edu/|Sending scheduler request to http://setiboinc.ssl.berkeley.edu/sah_cgi/cgi
27/11/2005 21:42:04|http://setiathome.berkeley.edu/|Reason: Requested by user
27/11/2005 21:42:04|http://setiathome.berkeley.edu/|Requesting 8640 seconds of new work
27/11/2005 21:44:51|http://setiathome.berkeley.edu/|Scheduler request to http://setiboinc.ssl.berkeley.edu/sah_cgi/cgi failed with a return value of 500
27/11/2005 21:44:51|http://setiathome.berkeley.edu/|No schedulers responded
27/11/2005 21:44:51|http://setiathome.berkeley.edu/|Couldn't connect to URL http://setiathome.berkeley.edu/.Please check URL.
27/11/2005 21:44:51|http://setiathome.berkeley.edu/|Resetting project
27/11/2005 21:44:51||request_reschedule_cpus: exit_tasks
27/11/2005 21:44:51|http://setiathome.berkeley.edu/|Detaching from project

I'm starting to wonder about the HTTPS vs http stuff.

I've emailed both Rom Walton and Dr Anderson an provided info and links to these threads

tony
ID: 197137 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 197153 - Posted: 27 Nov 2005, 23:08:55 UTC - in response to Message 197137.  

I'm starting to wonder about the HTTPS vs http stuff.

Aha... I was wondering about that as well: The Wiki describes: "BOINC (Boinc.exe) needs to open an inbound connection to either 1043 or 31416, and an outbound connection to port 80 for downloads and uploads of workunits, results, and science packages, and an outbound connection on port 443 during the attach process to a project."

I know John Keck said it is used to attach to or access a secure server. Is the Seti server recognized as a secure server? So shouldn't the connect to then happen with the HTTPS marker instead of the HTTP ?
ID: 197153 · Report as offensive
1mp0£173
Volunteer tester

Send message
Joined: 3 Apr 99
Posts: 8423
Credit: 356,897
RAC: 0
United States
Message 197432 - Posted: 28 Nov 2005, 5:44:38 UTC - in response to Message 197153.  

I'm starting to wonder about the HTTPS vs http stuff.

Aha... I was wondering about that as well: The Wiki describes: "BOINC (Boinc.exe) needs to open an inbound connection to either 1043 or 31416, and an outbound connection to port 80 for downloads and uploads of workunits, results, and science packages, and an outbound connection on port 443 during the attach process to a project."

I know John Keck said it is used to attach to or access a secure server. Is the Seti server recognized as a secure server? So shouldn't the connect to then happen with the HTTPS marker instead of the HTTP ?

By convention, web servers are on port 80, but it is entirely possible to override the port and run HTTP on any other port number.

Same is true for HTTPS (SSL) -- it is generally on port 443, but can be done on a non-standard port.

BOINC may be using 443 because many companies allow port 443 through their firewalls.

So, it can be port 443 and not run SSL or TLS.

Don't get me started on the "secure server" question -- It isn't about security, it's about identity. ... and for another time.
ID: 197432 · Report as offensive
1mp0£173
Volunteer tester

Send message
Joined: 3 Apr 99
Posts: 8423
Credit: 356,897
RAC: 0
United States
Message 197434 - Posted: 28 Nov 2005, 5:47:17 UTC - in response to Message 197137.  

Ned, at this point there are 4 affected users. All have firewall off, all can ping and traceroute both servers. One stated that ports 443, 80, 1043, and 31416 were open both ways. and still couldn't attach.

This is in the mesage log of all:

(snip)

27/11/2005 21:41:47||Missing account key


The line above seems to say that there is something wrong with their sign-in.

27/11/2005 21:42:03|http://setiathome.berkeley.edu/|Master file download succeeded

... and this says that they can connect to the SETI servers.

Sounds like connectivity (and firewall, etc) is not the issue -- it's in their sign on procedure.

-- Ned
ID: 197434 · Report as offensive
John McLeod VII
Volunteer developer
Volunteer tester
Avatar

Send message
Joined: 15 Jul 99
Posts: 24806
Credit: 790,712
RAC: 0
United States
Message 197447 - Posted: 28 Nov 2005, 6:06:20 UTC

BOINC uses https on port 443 when it needs to send the password back to the server. Since https does do encryption of the payload, it is much more secure than http that does not do any encryption of the payload.


BOINC WIKI
ID: 197447 · Report as offensive
Profile barbarossa
Avatar

Send message
Joined: 4 Sep 99
Posts: 1294
Credit: 6,629,998
RAC: 3
Switzerland
Message 197826 - Posted: 28 Nov 2005, 19:36:06 UTC

Bump.

Users with the '500-problem' begin to heap up...

:-)= Greybeard
All about BOINC: BOINC-Wiki (by Paul D. Buck)

ID: 197826 · Report as offensive
1mp0£173
Volunteer tester

Send message
Joined: 3 Apr 99
Posts: 8423
Credit: 356,897
RAC: 0
United States
Message 197915 - Posted: 28 Nov 2005, 21:34:09 UTC - in response to Message 197826.  

Bump.

Users with the '500-problem' begin to heap up...

:-)= Greybeard

The log example given earlier says "missing account key" so we need to start looking at that as a possible reason.

I guess I could load up BOINC on a test machine and do a clean install/sign-up, but I'm not sure I'm going to do the same steps. Worth a try, though.
ID: 197915 · Report as offensive
Astro
Volunteer tester
Avatar

Send message
Joined: 16 Apr 02
Posts: 8026
Credit: 600,015
RAC: 0
Message 198033 - Posted: 29 Nov 2005, 0:12:12 UTC

I don't think the missing key message is a problem. Everytime we start a new version of boinc, or restart, it checks for a key. That's just a message saying "I haven't found a key". I think that happens because it hasn't yet communicted with the local client and exchanged keys (on a secure path). I.E It's NOT attached just yet. I've seen that missing key message many times when I did a "Virgin" install.
ID: 198033 · Report as offensive
1 · 2 · 3 · 4 . . . 8 · Next

Message boards : Number crunching : Configuring a PORT problem, or firewall


 
©2025 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.