Proof port forwarding is working

HCHTech

Well-Known Member
Reaction score
4,308
Location
Pittsburgh, PA - USA
I'm having a little tiff with the support department of the postage meter vendor at a clients. It stopped communicating with mothership last week (part of how you reload it with postage $).

So...the client has a Server 2012 domain, the workstations are all Win7 Pro and they have a Sonicwall behind a Comcast gateway in bridge mode with a static IP. The postage meter is connected via USB to one of the workstations, and there is software resident on that workstation to control the meter.

We didn't change anything on the server or Sonicwall, and I can find no evidence that the client changed anything (no new software installed on the workstation, for example).

The vendor gave me a short list of ports that have to be opened to the workstation that talks to the meter. 20, 21, 53, 1023. There was also a string of IP addresses to whitelist. Neither the port-forwarding or IP whitelisting was ever required before, mind you, and the meter had been working for well over a year with no special setup. Trying to help them check their boxes and maybe start suspecting that the meter itself as the problem, I give that workstation a DHCP reservation and create the port forwarding in the Sonicwall. This doesn't help the problem, but the vendor is saying the port forwarding isn't working because they bring up www.yougetsignal.com/tools/open-ports on the workstation and it reports the ports are closed.

First of all, I'm not sure sites like this are definitive, and second of all, the fact pattern makes me think the problem is more mechanical instead of configuration. They are having none of this, however, basically telling me to figure it out and call back once I get a positive result on their port-checker website.

I've tried disabling the Windows firewall on the workstation as a test, as well as recreating the forwarding order extra-carefully in the Sonicwall - all to no avail. The port-checker site still reports those ports closed from the workstation. It's a bit of a drive so I was hoping to do this all remotely, but I think I'll end up going out there tomorrow. Plus, it's late - maybe another look with fresh eyes tomorrow.
 
also late here and reading with bleary eyes, but how does the meter work when directly connected to the net? Can you bypass the sonicwall and run direct (temporarily)? Maybe put a temporary wireless card in the workstation and hotspot it to your phone?
 
Yeah I've heard that same story from postage meter support....clients have it not work...they call support...support tells them their firewall needs to have ports opened.
It often gets confused and we assume "port forwarding"...but all the meters need is outbound allowed. And in SMBs...we usually don't clamp down on outbound.

Example..port 53 is DNS..so the meter can "phone home". You don't need to open/forward port 53 to the postage meter rig.

Typically a bounce of the router...and then a bounce of the postage meter workstation...gets it working just fine again. Their software is sloppy and lazy. Make sure it's updated.
 
I'm having a little tiff with the support department of the postage meter vendor at a clients. It stopped communicating with mothership last week (part of how you reload it with postage $).

So...the client has a Server 2012 domain, the workstations are all Win7 Pro and they have a Sonicwall behind a Comcast gateway in bridge mode with a static IP. The postage meter is connected via USB to one of the workstations, and there is software resident on that workstation to control the meter.

We didn't change anything on the server or Sonicwall, and I can find no evidence that the client changed anything (no new software installed on the workstation, for example).

The vendor gave me a short list of ports that have to be opened to the workstation that talks to the meter. 20, 21, 53, 1023. There was also a string of IP addresses to whitelist. Neither the port-forwarding or IP whitelisting was ever required before, mind you, and the meter had been working for well over a year with no special setup. Trying to help them check their boxes and maybe start suspecting that the meter itself as the problem, I give that workstation a DHCP reservation and create the port forwarding in the Sonicwall. This doesn't help the problem, but the vendor is saying the port forwarding isn't working because they bring up www.yougetsignal.com/tools/open-ports on the workstation and it reports the ports are closed.

First of all, I'm not sure sites like this are definitive, and second of all, the fact pattern makes me think the problem is more mechanical instead of configuration. They are having none of this, however, basically telling me to figure it out and call back once I get a positive result on their port-checker website.

I've tried disabling the Windows firewall on the workstation as a test, as well as recreating the forwarding order extra-carefully in the Sonicwall - all to no avail. The port-checker site still reports those ports closed from the workstation. It's a bit of a drive so I was hoping to do this all remotely, but I think I'll end up going out there tomorrow. Plus, it's late - maybe another look with fresh eyes tomorrow.

Pitney Bowes? If so which model? How are you reloading?
 
Ah yes, the joys of dealing with shitney balls

HAHAHAHA! and I thought @YeOldeStonecat had a corner on the crazy rename business! :-)

So this morning, I deleted the thing from device manager, rebooted the computer to let it rediscover and what do you know, it freaking works.

Arrgh. I got so focused on the port forwarding thing - I should have gone with my gut in the first place. I removed the forwarding I put in according to their technotes and it still works. Just as you guys exptected. It's a K700, btw.

I'm not sure why, but their software's screen for reloading postage shows amounts in 3 decimal places - so the choice for $50 was shown as $50.000. Through a remote connection, that looks a lot like $50,000. I'm thinking WHO would put $50K in postage on a meter?!? Haha.
 
Back
Top