How To Add Support for MSN Messenger Net2Phone in Internet Security and Acceleration Server 2000 (284554)


The information in this article applies to:

  • Microsoft BackOffice Server 2000
  • Microsoft Internet Security and Acceleration Server 2000
  • Microsoft Small Business Server 2000
This article was previously published under Q284554

IN THIS TASK

SYMPTOMS

This article describes how to add support for the MSN Messenger Net2Phone feature in Microsoft Internet Security and Acceleration (ISA) Server 2000.

back to the top

MORE INFORMATION

Provide Support for Net2Phone

To provide support for the Net2Phone feature in MSN Messenger, create the following custom protocol definition for MSN Messenger to provide support for Net2Phone connections:
  • Primary Connection:

    Port number: 1863
    Protocol type: TCP
    Direction: Outbound
  • Secondary Connections:

    Port range: From 5004 to 65535
    Protocol type: UDP
    Direction: Send Receive

    Port range: From 6891 to 6900
    Protocol type: TCP
    Direction: Inbound

    Port range: From 6891 to 6900
    Protocol type: TCP
    Direction: Outbound

    Port range: From 6901 to 6901
    Protocol type: TCP
    Direction: Outbound
Create the following protocol rule to permit the MSN Messenger and Net2Phone protocols:
  • MSN Messenger and Net2Phone

    Rule Applies to: Selected protocols
    Protocols: New MSN Messenger (where New MSN Messenger is the new custom MSN Messenger protocol that you created) and Net2Phone.
    Applies to: Any request
Edit the Firewall Client initialization file to add the following information:

[msmsgs]
NameResolutionForLocalHost=E
RemoteBindUDPPorts=0,6901

back to the top

Create a Protocol Definition

Create a new custom protocol to define MSN Messenger and the Net2Phone feature. To do so:
  1. Start the ISA Management snap-in. To do this, click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Management.
  2. Locate the Protocol Definitions container under Policy Elements.
  3. Right-click Protocol Definitions, point to New, and then click Definition.
  4. In the Protocol definition name box, type a descriptive name for the definition (for example, type New MSN Messenger), and then click Next.
  5. In the Port number box, type 1863, select the TCP option in the Protocol type list (if it is not already selected), select the Outbound option in the Direction list (if it is not already selected), and then click Next.
  6. Under Do you want to use Secondary connections?, click Yes.
  7. Click New, type 5004 in the From box, type 65535 in the To box, click UDP in the Protocol type list, click Send Receive in the Direction list, and then click OK.

    Note Make sure that you click Send Receive and not Receive Send in the Direction list.
  8. Click New, type 6891 in the From box, type 6900 in the To box, click TCP in the Protocol type list, click Inbound in the Direction list, and then click OK.
  9. Click New, type 6891 in the From box, type 6900 in the To box, click TCP in the Protocol type list, click Outbound in the Direction list, and then click OK.
  10. Click New, type 6901 in the From box, type 6901 in the To box, click TCP in the Protocol type list, click Outbound in the Direction list, and then click OK.
  11. Click Next, confirm your settings, and then click Finish.
The new custom protocol is listed in the right pane under Available Protocols.

back to the top

Create a Protocol Rule

Create a protocol rule to allow access by using the new custom protocol that you created. To do so:
  1. Start the ISA Management snap-in. To do this, click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Management.
  2. Locate the Protocol Rules container under Access Policy.
  3. Right-click Protocol Rules, point to New, and then click Rule.
  4. In the Protocol rule name box, type a name for the rule (for example, type MSN Messenger and Net2Phone), and then click Next.
  5. Select the Allow option (if it is not already selected), and then click Next.
  6. In the Apply this rule to list, click Selected protocols.
  7. Click to select the following check boxes in the Protocols list:

    Net2Phone
    New MSN Messenger

    Where New MSN Messenger is the new custom MSN Messenger protocol that you previously created.
  8. Click Next, click the schedule that you want to use when allowing this protocol, in the Use this schedule list (for example, click Always), and then click Next.
  9. Under Apply the rule to requests from, select Any request (if it is not already selected), and then click Next.
  10. Confirm the configuration selections, and then click Finish.
The new protocol rule is listed under Available Protocol Rules in the right pane.

back to the top

Edit the Firewall Client Configuration File

Edit the Firewall Client configuration file (Mspclnt.ini). To do so:
  1. Open the Mspclnt.ini file by using a text editor such as Notepad. By default, this file is stored in the following location:

    C:\Program Files\Microsoft ISA Server\CLIENTS

  2. Add the following section heading and information at the bottom of the file:

    [msmsgs]
    NameResolutionForLocalHost=E
    RemoteBindUDPPorts=0,6901

  3. Save your changes to the file, and then close it.
back to the top

REFERENCES

For information about how to obtain SP1 for ISA Server 2000, please visit the following Web site:

http://www.microsoft.com/isaserver/downloads/sp1.asp

For additional help and support with Microsoft Internet Security and Acceleration (ISA) Server, see the following Web sites:

http://www.microsoft.com/isaserver

http://www.isaserver.org

back to the top
Modification Type:MinorLast Reviewed:7/2/2004
Keywords:kbnofix kbBug kbprb kbhowto KB284554
©2004 Microsoft Corporation. All rights reserved.