iChat And New D-Link Router Problems

Folks,

I really need a helping hand with iChat. I've posted some problems here before which you were kind enough to help me out with but I am at wits end tonight. I just bought a new D-Link EBR-2310 Wired Router (Hardware Version B1 and Firmware Version 2.01 - the very latest version). I'm completely up to date on my iMac running Mac OS X 10.5.7 with every software update known to June 11th, 2009 including QuickTime 7.6.2. I have QuickTime Streaming set to 1.5Mbps T1/Intranet LAN and iChat Bandwidth Limit set to 500 kbps.

I use an AIM account which uses port 5190. With my old D-Link Router (DI-604), I had to set up an Advanced Virtual Server for UDP Port 5190 and I also had to disable the "Discard Ping From WAN side" function (which seems to almost defeat the purpose of the security of the router in some ways but I didn't have much choice). Making these changes seemed to fix all the iChat "communications error" problems I was having with the older router. Things seemed to work fine after making these changes mind you, this was under Mac OS X 10.5.6 and I'm now running Mac OS X 10.5.7.

In this new D-Link EBR-2310 Router, I've done much the same thing. In the Advanced Section of the new router under Application Rules, I've set up a new "application name" called iChat and configured Trigger Port 5190 UDP and Firewall Port 5190 UDP - set to "always" but should I have both UDP and TCP enabled or just UDP? I've also enabled "WAN Ping Respond" (again, this seems to defeat some of the security of the router but no choice other than to do this).

I'm getting iChat "communications errors" and just a generally poor connection with whomever I chat with. On their end, my voice will drop out at times and my image will sometimes have a little static in it. It happens with all users on their end (some are AIM users, some are dotmac/mobile me users). After a few minutes of being able to chat, the picture will freeze and a communication error pops up. We have to quit out of our connection and log back in and then it will work again for a while until the same problem occurs.

I called D-Link and they were of no help when it came to using Macs with iChat (iChat isn't even listed as one of the applications in any of the router preferences). They suggested changing the MTU from 1500 down to 1492 but my old D-Link worked fine at 1500. They also suggested disabling "SPI" in the router firewall settings. I haven't done any of this yet as they didn't know much about Macs.

Do I need to disable "SPI" in the router firewall settings? Do I need to configure both UDP and TCP ports 5190 in Application Rules? Do I need to set up some sort of Port Forwarding on this new router? Is there some other configuration I need to set up in this new router? I'm just lost. Darned near ready to do away with the router completely but we have three Macs on our network so we need the router in order for all of us to be able to access the Internet.

Any help would be greatly appreciated.

Thanks,
Gerard

24-Inch iMac 3.06 GHz Intel Core 2 Duo - 4 GB RAM, Mac OS X (10.5.7)

Posted on Jun 11, 2009 9:10 PM

Reply
7 replies

Jun 12, 2009 11:02 AM in response to Defcom-UK

Thanks so much for the link - having seen this, it looks like I need to set up Port Forwarding. If this is the case, do I even need to have anything configured in Application Rules (both UDP and TCP ports 5190 as I currently have) or is it just the Port Forwarding that I need to be concerned with? I'm still kind of unsure about the SPI setting and if I should just leave that enabled (default is enabled)? And can I disable "WAN Ping Respond"?

Thanks so much,
Gerard

Jun 12, 2009 1:29 PM in response to Gerard James

One other question - in Apple's documentation, they state at:

http://support.apple.com/kb/HT1507

*Ports to open for Mac OS X firewall*

When using the built-in Mac OS X firewall, you only need to open these ports: 5060, 5190, 5297, 5298, 5678, *16384 through 16403*. If using Jabber in Mac OS X 10.4 or later, open 5220, 5222, 5223 as well.

But on the link you gave me above, Ralph says to open :

UDP 5190, 5297, 5298, 5353, 5678, 16393-16402
TCP 5190, 5220, 5222, 5223, 5298

Which is correct?

Thanks,
Gerard

Jun 12, 2009 2:03 PM in response to Gerard James

Hi,

Both are correct.

iChat 3 uses 20 ports as a Range for the A/V chats as it uses 4 ports on a Vid in Vid Out, Audio In Audio Out basis where as iChat 4 sends and gets everything on one port.

The iChat 4 Article http://support.apple.com/kb/HT2282 does not mention the Bonjour or Jabber Ports which are still needed (in the router and/or Modem)

What the Second Article does not list is the iChat Screen Sharing port.
For this using UPnP if the device has it is better.

UPnP (Universal Plug and Play) allows the app to sate when and what ports are open for it (they close after a period of Non use that can be adjusted in some modem/routers).

You need this as the Screen Sharing ports is random.

The Port Forward site shows two versions
Version 1
Version 2
with slight differences in how the boxes can be filled in.
Neither set of pics gives clues as to whether UPnP is on there.

Yes I would disable SPI (And/Or DoS)
SPI (Stateful Packet Inspection) tries to examine the data coming to your modem and judge if it is Ok to pass on.
There is so much iChat Video data in some chats that it can not keep up and closes the port.
DoS (Denial Of Service) measures the rate of data and when it reaches a threshold it cuts the port presuming it to be an attack. Of course most devices that have it have un-adjustable settings that do not reflect modern Internet Speeds.

EDIT
This Emulator says UPnP is in Advanced Network along with Enable WAN Ping Respond (Although you do not have a time limit adjustment)

User uploaded file

9:57 PM Friday; June 12, 2009

Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

Message was edited by: Ralph Johns (UK)

Jun 12, 2009 3:30 PM in response to Ralph-Johns-UK

Thanks so VERY much, Ralph - I was hoping you would chime in as your knowledge of this stuff is absolutely amazing (how did you ever learn all of this). I will visit the sites you have pointed out right now and do some re-configuring. I'm still a bit confused about the "Enable WAN Ping Respond" setting - I still don't understand if I should I enable or disable it? And yes - my new router does have a UPnP setting and it is currently enabled.

I have another, somewhat unrelated-to-iChat problem with the new router, however - perhaps you can shed some light on this for me. Since connecting the new router to our system, I am noticing some errors in my console log (which definitely aren't related to iChat). I think the errors may be due to the fact that I have the WAN Port Speed of the router set to "Auto 10/100Mbps" and we actually have the router cascaded to an old 10Mbps ethernet hub so it looks like my iMac is trying to (unsuccessfully) negotiate a faster port speed periodically (on my old D-Link router, I had the WAN Port Speed just set to 10Mbps and I never noticed any of these errors):

Jun 12 14:27:00 <my computer> kernel[0]: AppleYukon2: 00000001,00000000 sk98nif - deadmanCheck - nothing received, resetting chip
Jun 12 14:27:00 <my computer> configd[14]: AppleTalk shutdown
Jun 12 14:27:03 <my computer> configd[14]: AppleTalk shutdown complete
Jun 12 14:27:05 <my computer> kernel[0]: AppleYukon2: error - Link Partner not Auto-Neg. able
Jun 12 14:27:05 <my computer> configd[14]: AppleTalk startup
Jun 12 14:27:05 <my computer> kernel[0]: AppleYukon2: 00000000,00000000 skgehw - cppSkDrvEvent - SK DRV_LIPA_NOT_ANABLE: link partner not auto-negotiate capable, port, phy r6
Jun 12 14:27:05 <my computer> kernel[0]: Ethernet [AppleYukon2]: Link up on en0, 10-Megabit, Half-duplex, No flow-control, Debug [796d,0c08,0de1,0200,0021,0000]
Jun 12 14:27:10 <my computer> configd[14]: AppleTalk startup complete

Does this make sense? Perhaps I should change the WAN Port Speed on the new router to 10Mbps and hopefully these errors will subside?

Thanks,
Gerard

Jun 13, 2009 12:02 PM in response to Gerard James

Hi,

I store links that Defcom sends me.

IF you are using Ethernet then in System Preferences > Network > Advanced Button > Ethernet tab you can change to Manually configured speeds including full duplex.

Full Duplex does bear an impact on both ends talking at the same time and hearing each other rather than a 'You send, I send' sort of method. AS the Video needs to be flowing in both directions both the change you suggest and getting Full Duplex in operation are likely to help.

User uploaded file

8:02 PM Saturday; June 13, 2009

Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

iChat And New D-Link Router Problems

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.