BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 01-29-2008, 11:53 AM   #1
infinite1der
New Member
 
Join Date: Dec 2006
Location: Atlanta, GA
Model: 8320
Carrier: Tmobile
Posts: 9
Default Tmoblie H@H users with cable internet

Please Login to Remove!

Just an FYI...

I just recently upgraded to a 8320, and I could use associate with my AP and get UMA status. Unfortunately, I could not use the browser while on wifi. I could make calls on UMA with no issue.

So, I sat on my firewall and noticed that all of the http/https packets coming from my 8320 were set with DF (Don't Fragment) option. Normally, that's fine but my cable modem's (Comcast provided Motorola SBV5220) ethernet sets the MTU to 578 automagically. Thus, my firewall would drop the "large" packets from my Curve.

It's a simple fix (at least on linux { ifconfig $IFACE mtu 1500 }), but it took a bit of investigating (especially after fumbling through iptables to allow IPSEC =]).

So, long story short. If you're having issues browsing via wifi, check your MTU settings between your gateway (firewall) and your cable modem.

--JamesT
Offline  
Old 01-29-2008, 12:00 PM   #2
John Clark
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,720
Default

Thanks for the info. It's well documented, though, that IPSEC needs to be enabled on the router and router firewall disabled.
Offline  
Old 01-29-2008, 12:09 PM   #3
infinite1der
New Member
 
Join Date: Dec 2006
Location: Atlanta, GA
Model: 8320
Carrier: Tmobile
Posts: 9
Default

Yes... The wife was having issues with her Nokia 6086 trying to establish a UMA session, so I was looking a little deeper than just simply allowing IPSEC.

Anyways... all is well now.

--JamesT
__________________
-----------------------
JamesT
Atlanta, GA

BB: 8700c, 8320t
Offline  
Old 01-29-2008, 12:15 PM   #4
John Clark
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,720
Default

Here are some links that may be of interest to you.

Linksys Router Tips - BlackBerryFAQ.com (these are good for most routers, not just Linksys.)

http://www.blackberryforums.com/wifi...s-linksys.html
Offline  
Old 02-12-2008, 04:18 PM   #5
datagrid
New Member
 
Join Date: Feb 2008
Model: 7100t
PIN: N/A
Carrier: verizon
Posts: 1
Default Open port on other firewall?

When my Linksys WRT54GS is plugged in to my DLink Broadband VPN router, my phone will not connect to WIFI. If I remove the DLink from the mix, the phone connects to WIFI on the Linksys. That tells me there is a setting that must be changed on the DLink. The DLink is a great firewall - but what do I have to relax on it to allow the WIFI connection?
Offline  
Old 02-12-2008, 05:39 PM   #6
DallasFlier
BlackBerry Extraordinaire
 
DallasFlier's Avatar
 
Join Date: Feb 2006
Location: Dallas, TX
Model: 9800
OS: 6.0.0.666
PIN: OT NOIR
Carrier: AT&T/Cingular/AT&T
Posts: 1,741
Default

Quote:
Originally Posted by John Clark View Post
Thanks for the info. It's well documented, though, that IPSEC needs to be enabled on the router and router firewall disabled.
Quote:
Originally Posted by John Clark View Post
Here are some links that may be of interest to you.

Linksys Router Tips - BlackBerryFAQ.com (these are good for most routers, not just Linksys.)

http://www.blackberryforums.com/wifi...s-linksys.html
John, neither one of those links mentions disabling the router firewall. Although I don't yet have a wifi BlackBerry, I don't *think* you should have to disable the firewall. From a security perspective, hopefully you don't, because that's a very BAD thing to do.
__________________
Top 50 Year Win%: Nebraska-.785 tOSU-.768 Penn St-.740
Oklahoma-.740 Texas-.733 Alabama-.729 Michigan-.724 USC-.723
Dominance! The HUSKER Tradition!
Offline  
Old 02-12-2008, 11:10 PM   #7
TroyDBrown
No longer Registered.
 
Join Date: Jun 2007
Model: 9530
OS: 4.7.0.XXX
PIN: G Pong Champ
Carrier: T-Mobile U.S.
Posts: 5,515
Default

Wirelessly posted (Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) BlackBerry8320/4.2.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/100)

I have mine with firewall enabled without issue. As for disabling the firewall and the use of NAT you are safe. Your IP is not routable.
Offline  
Old 02-13-2008, 04:54 AM   #8
fbueller
Knows Where the Search Button Is
 
Join Date: May 2007
Model: 8100
PIN: N/A
Carrier: T-Mobile
Posts: 45
Default

I'm using DD-WRT and have the firewall enabled and IPSEC disabled. Works fine for me.
Offline  
Old 02-13-2008, 09:54 AM   #9
DallasFlier
BlackBerry Extraordinaire
 
DallasFlier's Avatar
 
Join Date: Feb 2006
Location: Dallas, TX
Model: 9800
OS: 6.0.0.666
PIN: OT NOIR
Carrier: AT&T/Cingular/AT&T
Posts: 1,741
Default

Quote:
Originally Posted by troydbrown View Post
I have mine with firewall enabled without issue. As for disabling the firewall and the use of NAT you are safe. Your IP is not routable.
Glad to hear it works with firewall enabled. You're correct that with NAT your internal IP is not routable, and NAT certainly does provide a level of protection. But over the last couple years, methods of attack have gotten a lot more sophisticated too, and there are a number of attack vectors that NAT won't protect you from. Most of the better modern routers have a SPI (stateful packet inspection) firewall, and its most definitely not considered good practice to run with that shut off if at all possible.
__________________
Top 50 Year Win%: Nebraska-.785 tOSU-.768 Penn St-.740
Oklahoma-.740 Texas-.733 Alabama-.729 Michigan-.724 USC-.723
Dominance! The HUSKER Tradition!
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


Branson 902J Ultrasonic Welder  Transducer Amplifier & Horn 101149098,416026021 picture

Branson 902J Ultrasonic Welder Transducer Amplifier & Horn 101149098,416026021

$599.00



Honeywell EVS-125W Silent Knight Amplifier INTELLIGENT NEW OPEN BOX picture

Honeywell EVS-125W Silent Knight Amplifier INTELLIGENT NEW OPEN BOX

$749.99



FANUC SPINDLE AMPLIFIER A06B-6078-H202#H500 *REFURBISHED TESTED 1 YEAR WARRANTY* picture

FANUC SPINDLE AMPLIFIER A06B-6078-H202#H500 *REFURBISHED TESTED 1 YEAR WARRANTY*

$1449.95



Military TS-505D/U Tube Amplifier Multimeter picture

Military TS-505D/U Tube Amplifier Multimeter

$45.00



SKAR AUDIO USED SK-M4004D 400 WATT 4-CHANNEL CLASS D MINI CAR AMPLIFIER picture

SKAR AUDIO USED SK-M4004D 400 WATT 4-CHANNEL CLASS D MINI CAR AMPLIFIER

$114.99



BJ300 Plus BJ300Plus 3-30MHz Radio Power Amplifier +Fan FM 100W AM 200W SSB 300W picture

BJ300 Plus BJ300Plus 3-30MHz Radio Power Amplifier +Fan FM 100W AM 200W SSB 300W

$104.49







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.