Does LogMeIn require router firewall reconfiguration?

[mikeymikec]

The official support isn't that helpful on this topic. I'm guessing that this software probably uses uPnP to configure the router firewall to allow inbound port 443 traffic to it.

 

[Dahak]

Been a while since I have used it, but no I do not recall needing to configure the firewall to allow it in.

Actually have customer that uses it for 1 machine and its behind a business firewall and there is no configuration on it for logmein

 

[Ketchup]

I did not have to do anything with the Firewall on either end when I used it, but I never used it in conjunction with a 3rd-party firewall.

 

[Squeetard]

Nope. Port 443 is for SSL traffic and should be open.

 

[Mushkins]

No special firewall magic here, and I use it every single day from behind Sonicwall firewalls. Pretty sure it just uses regular old SSL.

 

[mikeymikec]

Nope. Port 443 is for SSL traffic and should be open.

Yes, but not normally inbound, surely?

Correct me if I'm wrong, but as I understand it:

When your browser communicates via SSL, it asks your PC to open a port (random port number above x000) and request a connection to port 443 of the server. It doesn't come back to port 443 on your PC either.

I've just double-checked this by running tcpview and connecting to a secure website - Firefox opened ports in the 65xxx range to port 443 of the website. No port connections have been made to my PC to 443.

Most router firewall default configs I've seen are pretty simple: Allow everything out, block everything in unless it was part of a connection requested by a LAN client. Then there's uPnP.

 

[John Connor]

I disable uPnP (Universal Plug and Pray) in the router. If you really need a port open do so manually. If you can use a port trigger all the better. In fact if you can port forward above around 15000 that would be even better as well.

You're right on your assumption. When you surf the net and have apps make an Internet connections this is all outbound traffic, not inbound. Only allow inboud with a specific port if you are port forwarding. This might help. http://help.logmein.com/articles/en_US/FAQ/How-do-I-configure-my-firewall-to-work-with-LogMeIn-en1

This might help on changing the port since port scanners are sure to scan for 2000. http://community.logmeinrescue.com/...port-std-hamachi-logmein-com-12975/td-p/67954

I would just use Team Viewer. No port forwarding needed, uses AES and is HIPAA compliant.