Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...

Windows Server Forum / Windows Media Server / March 2008

Tip: Looking for answers? Try searching our database.

Connecting to WMS from outside firewall

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
griffore@gmail.com - 12 Mar 2008 06:02 GMT
I have opened up the following ports on my firewall:
80,554,5004,5005,1755
(both TCP & UDP)

Whenever I try to play the stream WMP gives me the "cannot play file/
server
busy" error message. I can stream within the firewall no problem.

My server is located here: http://griffore.sytes.net
griffore@gmail.com - 12 Mar 2008 06:18 GMT
This works internally:

mms://serverX/Radio/* or http://serverX/Radio/*

but not when I try from outside my firewall:

mms://griffore.sytes.net/Radio/* or http://griffore.sytes.net/Radio/*
Steve Foley - 13 Mar 2008 13:17 GMT
> This works internally:
>
[quoted text clipped - 3 lines]
>
> mms://griffore.sytes.net/Radio/* or http://griffore.sytes.net/Radio/*

Your server is responding with a service unavailable message.

HTTP/1.1 503 Service Unavailable
Server: Cougar/9.5.6001.18000
Date: Thu, 13 Mar 2008 12:11:18 GMT
Pragma: no-cache, timeout=60000
Supported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch,
com.microsoft.wm.predstrm, com.microsoft.wm.fastcache,
com.microsoft.wm.startupprofile
Connection: close
griffore@gmail.com - 13 Mar 2008 16:32 GMT
> Your server is responding with a service unavailable message.
>
[quoted text clipped - 6 lines]
> com.microsoft.wm.startupprofile
> Connection: close

Any ideas as to why it would not be available?
Steve Foley - 13 Mar 2008 19:08 GMT
> > Your server is responding with a service unavailable message.
> >
[quoted text clipped - 8 lines]
>
> Any ideas as to why it would not be available?

I dunno. I looks like a security thing to me. The server *IS* responding,
but not sending the stream.

Have you checked this site?

http://www.microsoft.com/windows/windowsmedia/forpros/serve/firewall.aspx

It says you need 1024-5000 outbound UDP opened.

Any chance you're forwarding ports to the wrong server?
Steve Foley - 13 Mar 2008 19:13 GMT
> > > Your server is responding with a service unavailable message.
> > >
[quoted text clipped - 19 lines]
>
> Any chance you're forwarding ports to the wrong server?

Get yourself a copy of SmartSniff from nirsoft.net. It will show you what
packats are going back anf forth. That's what I used to capture the above
messages. Run it from inside and outside the firewall and compare the
results.
Neil Smith [MVP Digital Media] - 13 Mar 2008 20:04 GMT
>> Your server is responding with a service unavailable message.
>>
[quoted text clipped - 8 lines]
>
>Any ideas as to why it would not be available?

First off - have you enabled HTTP streaming ? WMP11 won't be able to
use mms URLs *at all* without HTTP rollover. You can test that by
trying the equivalent RTSP URL to your content.

Secondly - it's not recommended to just open firewall ports here, it's
too complicated a job and the port range would have to be too wide for
client connections to make an effective firewall.

Instead, add the windows media services executable (wmserver.exe) to
the firewall exceptions list, and let the firewall open and close
ports as appropriate based on requests from the service.

http://www.microsoft.com/windows/windowsmedia/forpros/serve/firewall.aspx
says "ou should add the Windows Media Services program (wmserver.exe)
as an exception in Windows Firewall to open the default inbound ports
for unicast streaming, rather than opening ports in the firewall
manually. For more information,"

HTH
Cheers - Neil
------------------------------------------------
Digital Media MVP : 2004-2008
http://mvp.support.microsoft.com/mvpfaqs
griffore@gmail.com - 13 Mar 2008 22:41 GMT
On Mar 13, 3:04 pm, "Neil Smith [MVP Digital Media]" <n...@nospam.com>
wrote:

> First off - have you enabled HTTP streaming ? WMP11 won't be able to
> use mms URLs *at all* without HTTP rollover. You can test that by
[quoted text clipped - 12 lines]
> ------------------------------------------------
> Digital Media MVP : 2004-2008http://mvp.support.microsoft.com/mvpfaqs

I've tested that HTTP rollover is working by accessing my content via
RTSP. However, again, it only worked internally, not from outside my
firewall.

I've added wmserver.exe to the exception list of Windows Firewall even
though 'Windows Media Services' was already listed.

The only thing I can think it could be is my router setup. Anyone
available to help me out further?

Thanks.
Neil Smith [MVP Digital Media] - 15 Mar 2008 00:11 GMT
>On Mar 13, 3:04 pm, "Neil Smith [MVP Digital Media]" <n...@nospam.com>
>wrote:
[quoted text clipped - 10 lines]
>> the firewall exceptions list, and let the firewall open and close
>> ports as appropriate based on requests from the service.

>I've tested that HTTP rollover is working by accessing my content via
>RTSP. However, again, it only worked internally, not from outside my
[quoted text clipped - 5 lines]
>The only thing I can think it could be is my router setup. Anyone
>available to help me out further?

So in fact you've opened up those ports on the Router, not the
Firewall is the way I read your post. WMS will work best if the server
is placed in the DMZ of the router (i.e. exposed directly to the
internet, like most complex servers other than web servers).

Other configurations probably just won't work because the router won't
know how WMS specifically opens client ports to send the content.

HTH
Cheers - Neil
------------------------------------------------
Digital Media MVP : 2004-2008
http://mvp.support.microsoft.com/mvpfaqs
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.