tesagig  Ally Member

I had 1194 and 443 already open. But only opening 51920 made it connect

thanks. Yes, it works with no inbound ports. What I have seen form the USG log is that it even uses ports in the 50000 range. For example 51820. This seems strange for a VPN? In fact if I open udp 51820, VPN connects. But I feel this is random

BTW. If I allow all outbound traffic then the VPN works. But I want to be more surgical on what ports to open.

Hello? I found this article as well: https://support.zyxel.eu/hc/en-us/articles/360011000819-On-Premise-Nebula-Configure-Sonos-and-Spotify-Connect-for-Firewall-Switch Is there a fix coming up?

thanks. airplay is working. Turns out there is a defect in the Bluesound PulseFlex speaker

just wondering whether this could apply to my USG 100 Flex? Fundamentally, "Spotify Connect" does not work for me on my Bluesound Node. 1.) If I navigate though BluOS to Spotify the Spotify app indicates that it is trying to connect to my Node but never succeeds. 2.) If I click on airplay within spotify and select Node it…

no, to enable (outgoing ports) on my outgoing internet traffic. Currently, I have a custom security policy setup for this.

ok. this must be a rookie issue. Started adding apps I need. But when I go back to the profile, the list is empty. I do know from the log that the apps are working. As everything gets logged. Wanted to go back and switch off logging for forwards.

Looks like the app patrol for Spotify does not include port 4070. It is blocked…

Based on my other thread: can I simply accomplish this by flipping on "app patrol - airpaly"?

thank you. I will do this in steps. Working first on the app patrol. Is app patrol essentially a collection of ports that are opened? If so, is there a way to review which ports?

should I have a rule for Zywall to LAN?

thanks for reviewing it. IPsec con can't reach Lan.. —> I started playing around with VPN. Goal was when traveling to have access to ISP (not local resources) Lan to Lan it's strange... Have you VLAN? —> I have no VLAN. LAN to LAN traffic is allowed anyhow. So, this rule has to go. Geo ip you can set allow from nation who…

no, just regular on local LAN BTW. In general. what is the logic for opening ports between Zywall and LAN? If I don't have any rule for Zywall to LAN do I block something?

much appreciated! Just to clarify, I don't need to open ports to go outside (LAN to WAN). To make airplay work I only need internal traffic open? I do have already LAN1 to ZyWall fully open (any)