Signing in Face Time - Firewall - Ports - Provider

Hi,

Is your Mac Firewall On ?

If it is I presume that in the Advanced Button you have allowed Signed Apps ?

Have you added Face Time to this List ?

(Actually if the answer to the first two quesions is Yes, the System should have asked you the first time you started Face Time if it should be allowed).

The next issue will be your router.

Without ports being set to be allowed or opened then it will effectively be like a hardware firewall.

If you open the Skype Preferences it will tell you what port it wants to use (This can vary from download to download).

If Skype finds it cannot use this port then it will use either a common Mail port or a web browsing port (fallback ports) Useful for ease of set up but useless for security and knowing if the router is working as it should. (Generally Skype will work even if you don't set anything up for it)

iChat uses these ports http://support.apple.com/kb/HT1507?viewlocale=en_US

With these Changes for iChat 4 and 5 http://support.apple.com/kb/HT2282?viewlocale=en_US

(The "group of 20" becomes a group of 10 ports and port 5060 is no longer needed)

I list both as the second does not list the Jabber or Bonjour Ports that are still needed.

You will notice that the larger set of iChat ports cover most of what Face Time uses.

From there it depend how you have enabled or opened port in your Router.

If you have UPnP then I would enable that and disable any Port Forwarding you set up.

It will be an ON/Off setting and allows the Apps to tell the router which ports to open.

It also works for Multiple computers which Port Forwarding does not.

If you are using Port forwarding then just the coloured items need to be added in addition to any iChat Ports you have opened.

443 (TCP) (Apple Discussion uses this port in a web browers so if you are "here" then it is open)

3478 through 3497 (UDP)

5223 (TCP) (This is used by iChat for Jabber Connections)

16384 through 16387 (UDP) (Between these two nearly all the iChat 3 ports are covered anyway)

16393 through 16402 (UDP)

Hope this helps.

9:42 PM Saturday; June 4, 2011

Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Hi,

Your router (or modem that routes) may offer several different ways to open or allow ports to be used.

You would normally access the set up pages of the router in a web browser (Except for Apple Base Stations)

This requires the IP of the router and the User Name and Password info.

The IP can be seen in System Preferences > Network > Advanced Button > TCP/IP tab (As "Router IP")

The default info on the User ID and Password can be gained here

Click on your device.

Dismiss the next page at the top right

Chose an App in the next page (If iChat does not work chose AIM Talk as it has less ports and gets you to the next page)

On the next page you have to scroll a bit.

When the pics start it will tell you the default User Id And Passwords along with the IP address

It is now a question of searching all the tabs, menu and links on each page to find UPnP as it is in different places on different devices (if it is there at all)

Netgears tend to always have a menu down the left and UPnP is nearer the bottom as a separate menu item.

Linksys devices have it in the tab called Administration

D-Links tend to need Tools or Advanced across the tabs and Advance Networking down the menu buttons

Zyxels have a three column menu of links and it is at the bottom of the middle row.

Netopias and Motorolas don''t have UPnP

Port Forwarding tend to be easier to spot and the Port Forward link page will show you as well.

This is normally a table of ports and a listing of an IP that they are being sent to. (this should be the IP of the computer)

It can list Start and End ports (you list the same for single ports)

Sometimes they follow a setting such as 5190,5678,16384-16402 where single ports and groups are mixed (Commas and dashes only no spaces)

There may also be a a check box for Enabled.

You may also get a choice for Port Triggering (Advanced/Special Applications) which allows multiple computers to use the same ports.

DMZ (Demilitarised Zone) is a sort of extreme Port Forwarding. It is an On Off setting that allows All 65535 ports to be open to one IP (Computer) Useful for testing but lacks security.

Like a Web Browser, iChat and Face time use IP addresses to connect to the Buddy.

It helps if the DNS server info is working.
Some DNS servers are better at wider address areas so adding other DNS servers like that thread can help.

If you are now working it is likely that the router is already doing UPnP.

9:42 PM Friday; June 10, 2011

Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Glad to have helped.

10:08 PM Friday; June 10, 2011

Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously