Jeffrey Altman wrote:
> Is there anyone on this list that uses Norton Internet Security 2007?
> 
> If so, can you please write up a description of what steps are required
> to be performed in order to permit OpenAFS for Windows to bind to port
> 7001/udp?
> 
> An increasing number of bug reports are being received indicating that
> when NIS2007 is installed that the AFS client service can't start.
> 
> Thanks.
> 
> Jeffrey Altman

Based upon my 30 minute evaluation of this software, NIS 2006 and
NIS 2007 prior to update 2 are incompatible with OpenAFS for Windows.
If the Personal Firewall option is activated, there is simply no way to
configure it that will allow the OpenAFS client service to bind to port
UDP/7001.  OpenAFS for Windows is not on their Trusted Application List
and users are not permitted to modify it.

NIS 2007.2 does provide users the ability to add custom rules to permit
applications to be trusted.   However, while adding rules to permit
inbound and outbound UDP access for afsd_service.exe allows the client
service to successfully start, the SMB and Netbios services are blocked
not just for remote access but for local access as well.   I suspect
that an appropriate set of rules could be defined.

There is a trial version of the software that can be downloaded and
installed.  If someone has the time to determine what the correct
settings should be, the community would benefit from it.

Jeffrey Altman

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to