03-16-2011 06:10 AM
Hi, My firewall keeps dropping packets from Blackberry on ports 443 and 55604 i.e.
TCP packet - Source: 126.96.36.199 - Destination: 82.11.XXX.XXX - [Invalid sequence number received with Reset, dropping packet Src 443 Dst 55604 from WAN]
What does Blackberry want. I connect my curve through WiFi at home.
thanks for any help in advance
03-16-2011 06:23 PM
I'm not that informed about Blackberry used ports (i think there is no documentation either but don't quote me on that).
I can tell you that 443 is supposed to be http over ssl (https) and 188.8.131.52 is supposed to be RIM's ip but you should give us some more details.
First of all, if it's not too invasive to ask, what firewall are you using? A hardware one? A software one? Whats the name/model?, whats the message you get? (full message quoted if possible)
is that 82.11.XXX.XXX from router or you just censored an ip? (i never seen such a thing in a log lol)
What operating system you use? Do you use that blackberry within a BES?
Just guessing, and this is just the first thing that comes up, 55604 may be your local ip and 443 the port used, but that message is rather hard to get to me lol.
Anyways, here first ip's whois (just the essential to not flood)
03-17-2011 04:26 AM
Hi its a hardware firewall.
the XXX is my edit to conceal my IP address
My home IP address is the edited one and 55604 is the enquired port from BB and 443 is thier SSL port. In other words thier SSL site is enquiring my 55604 port on my wifi connected Curve.
Why are they doing that is the question?
03-17-2011 06:22 AM - edited 03-17-2011 06:22 AM
actually the question is: could you tell me the model/name of your firewall and post here the suspicious log entries? (warning about ssl connecting)
Because i highly doubt its your pc but much rather a local port (blackberry's)
03-17-2011 08:49 AM - edited 03-17-2011 08:50 AM
I'd say that 55604 is your blackberry's local port, you're probably fine, check your pc's firewall (if you have any) but im almost sure its just your blackberry using 443 (https) to connect to rim (trying to) or viceversa