firewall port number for softwareupdate?

Same problem here with my satellite router. I had no problems with software update in X 3.9 and X 4.0, but since the automatic update to 4.1, 9 out of 10 times software update gives me the same error, and tells me to check the network connection.

I have just resolved myself to do the manual download from the Apple site. Hopefully 4.3 will solve the problem.

A network error occurred:

Error NSURLErrorDomain -1005(-1005).
Make sure you can connect to the internet.

Background of an error -1005:

It is a URL loading error when a client computer's resource area fails establishing a handshake to access the data specified by a destination HTTP server-- for instance, when downloading Apple software updates.

This resource area conforms to 5 categories such as URL loading, cache management, authentication and credentials, cookie storage, and protocol support. The first category (URL loading) is consisted of 6 sessions and a session fails for some reason.

Now, secured the Root Certificate Authority system interacts with Safari, Mail, iChat and other Apple products which authorities are made available through the Software Update mechanism. You can view a part of the services on the X509Anchors keychain ( /System/Library/Keychains/X509Anchors and X509Certificates) when you open "Show Keychains" after launching Keychasin Access.app. You can also select Apple Root Certificate Authority therein to check whether the certificate is valid.

To begin with, identify where the cause lies with. It seems likely either .plist, caches, Keychain Access components, or the core system corruption. I recommend to remove file/s or folder/s to temporary folders on the desktop rather than trashing. To do so, you may reuse them after troubleshooting, if they are still needed.

Group 1:

(a) /Library/Preferences/com.apple.SoftwareUpdate.plist

This preference stores the keys and their values stating about when Software Update.app lastly attempted to access the Software Update service, etc.

(b) /Users/HOME/Library/Preferences/ByHost/com.apple.SoftwareUpdate.000xxxxxxxxx.pli st

This preference contains the key "AgreedToLicenseAgrement" for the value 1, and the key of "BackgroundDownload" as the value 0. The modified date and time of Get Info should be matched with the previous Security Update (e.g. 2005-007)

(c) /Users/HOME/Library/Preferences/com.apple.SoftwareUpdate.plist

The modified date and time of Get Info will be set in between D/T for loginwindow[xxx]: Login Window Started Security Agent and
kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled... Two lined events are indicated on system.log.

/Users/HOME/Library/Preferences/com.apple.keychainaccess.plist

Group 2:
/Users/HOME/Library/Caches/com.apple.SoftwareUpdate/
/Users/HOME/Library/Caches/Software Update/

/Library/Caches/com.apple.SoftwareUpdate/swcdn.apple.com/content/downloads/

Group 3:
/Users/HOME/Library/Keychains/login.keychain
/Library/Keychains/System.keychain
/System/Library/Keychains/X509Anchors
/System/Library/Keychains/X509Certificates

NOTE: You may be asked the admin password when removing/trashing "X509" files for the replacement. You need to find another computer which stores these intact files BEFORE restarting the computer.

[ Edited by Apple Discussions Moderator; please refrain from modifying X509 keychains ]

Make sure to back up "Software Update.log" before you do troubleshooting.

Referneces: Apple URL Loading System, Apple Root Certificate and Authority

Jesse,

i don't understand how software update is blocked

The software update mechanism has different implications from those for a third-party application updating, however, and the user experiences for these procedures must reflect this-- Referred from Mac OS X Human Interface Guideline.

For instance case, if an automatic update by third-party application attempts to duplicate the user experience of Software Update in background without launching the application, an unexpected problem will occur.

Port 80 and 2068 are different. If you mean it is RFC 2068, I would suggest him to ask the router's vendor whether its firewall conform to the RFC rules in HTTP/1.1 specifications. Some rules have been changed.

If the firewall implementation is nothing wrong with the specifications, then he might improperly have treated the original Tiger 10.4 system to install.

As a last resort, he may need "Erase and Install" with Security Option/Zero Out Data after data backup.

Curt, Welcome to Discussions.

Since we ought to run permissions before & after all softwareupdates I have disabled all automatic downloads on all Appl. No suprises.

I have forgotten to turn off the firewall when updating & the updates,have not been good, I mostly get the message about "invalid checksum" . I do not
beleieve in coincidence

BTW:Kappy Knows a thing or two, I would take his advice.
No disrespect to any one.
Eme:~{)

I should have read all your posts. I think you have done necessary diagnoses for the issue.

If the customer install a third-party firewall or any Internet security application, or the administrator uses a network firewall for other platforms, there is a potential to cause such issues.

The customer may be able to check it by running Netstat of Network Utility, and observe the state of socket connections to find any odd indications when testing Software Update run. The local firewall may not work well with the socket implementation-- e.g., pragmatical treatments for every internal socket call.

It seems that if a direct socket connection to the remote VM fails to be attempted due to a firewall, the updating runtime uses HTTP with the explicit port number of the server-- could result in Web proxy caches corruption.

Also, an administrator can examine it by using IP packets professional analyzer (very expensive) for the network. For instance, proxies which serve through a network firewall should take special precautions regarding the transfer of header information that identifies the host behind the firewall for RFC 2068.

The cut and dried answer is: You cannot use Software Update if the firewall is turned on. You must download updates directly from the Apple download site.

Er, not sure what Kappy's on about there, Software Update works fine through the firewall here................Can't find that error code in the database here http://www.appleerrorcodes.com/ so it may be wrong, do it again and compare to the list.

Try the advice here http://docs.info.apple.com/article.html?artnum=106695 to see if it helps.

Have we tried multiple network ports? (ie. Ethernet instead of AirPort)?

I believe Software Update uses port 80.