BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 04-19-2007, 11:27 AM   #1 (permalink)
Thumbs Must Hurt
 
Join Date: Mar 2006
Model: 9800
Carrier: AT&T
Posts: 139
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default OS 4.2 Firewall/IT policy? Help!

Please Login to Remove!

Installed 4.2

Now i cant disable firewall!!! It's locked!

And when I try and run jivetalk it says "program trying to open connection inside/outside firewall which is not allowed by your IT policy"

I dont have an IT policy! I'm on a BIS... what gives!? It didnt do this on 4.1
Offline  
Old 04-19-2007, 01:52 PM   #2 (permalink)
New Member
 
Join Date: Mar 2007
Location: Brooklyn
Model: 8100
Carrier: T-Mobile
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I got the same error on my 8100 and I have no IT policy. I'm pretty sure I've used it successfully since the last upgrade so I presumed it was a problem with Jive Talk, not my device.
Offline  
Old 04-19-2007, 06:39 PM   #3 (permalink)
CrackBerry Addict
 
CBR900RR's Avatar
 
Join Date: Jan 2006
Location: USA
Model: 8310
Carrier: Tmobile
Posts: 676
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by Sk8Surfr View Post
Installed 4.2

Now i cant disable firewall!!! It's locked!

And when I try and run jivetalk it says "program trying to open connection inside/outside firewall which is not allowed by your IT policy"

I dont have an IT policy! I'm on a BIS... what gives!? It didnt do this on 4.1
Did you bought you phone used?
Sounds like it has the IT policy before and somebody wipe the policy with the instruction post here, and the firewall is lock to enable.
Are you sure you can disable firewall before the upgrade?
Try edit the application permission to allow jivetalk.
__________________
.T...Mobile. BB 8220
OS v4.6.0.180
DM v4.2.2.14 SP2
Offline  
Old 04-19-2007, 07:30 PM   #4 (permalink)
BBF Moderator
 
acnst's Avatar
 
Join Date: Aug 2004
Location: Germany
Model: 9700
PIN: not configured
Carrier: T-Mobile
Posts: 1,527
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Did you try to configure the Application permissions for your apps under Options->Advanced Options->Applications. Just select the application and open the menu - you should see an entry called "Application Permissions" (or similar)
__________________
Deutsches Blackberry Forum - visit www.blackberry-forum.de


for Microsoft Exchange

Offline  
Old 04-19-2007, 09:11 PM   #5 (permalink)
Thumbs Must Hurt
 
Join Date: Mar 2006
Model: 9800
Carrier: AT&T
Posts: 139
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by CBR900RR View Post
Did you bought you phone used?
Sounds like it has the IT policy before and somebody wipe the policy with the instruction post here, and the firewall is lock to enable.
Are you sure you can disable firewall before the upgrade?
Try edit the application permission to allow jivetalk.
No, phone has always been mine. It WAS on a BES... but i got the phone swapped through warranty.

I've been using it forever with 4.1 and i never had an issue.. and my firewall wasnt enabled before i upgraded.

I'll try and put a blank one on it.
Offline  
Old 04-19-2007, 09:13 PM   #6 (permalink)
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,686
Post Thanks: 4
Thanked 100 Times in 72 Posts
Default

If you can't change the firewall now, the blank IT policy won't help. I've tried. The policy is different from the firewall.
Offline  
Old 06-12-2007, 01:59 PM   #7 (permalink)
New Member
 
Join Date: Jun 2006
Model: 8100
Carrier: Cingular
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by John Clark View Post
If you can't change the firewall now, the blank IT policy won't help. I've tried. The policy is different from the firewall.
Did you ever get this fixed. I am having the same problem.
Offline  
Old 06-20-2007, 09:35 PM   #8 (permalink)
Knows Where the Search Button Is
 
Join Date: Jul 2006
Model: 8310
Carrier: Cingular
Posts: 27
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

i too am having this problem, but it is with YakOn, not jivetalk. This occured after updating my YakOn from 1.10 to 1.22. I never had any problems before.

I just sent a note to YakOn's support team.
Offline  
Old 06-20-2007, 09:45 PM   #9 (permalink)
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,875
Post Thanks: 3
Thanked 72 Times in 55 Posts
Default

Have you tried resetting the firewall? I had a user today who couldn't access a 3rd party app and after restarting the firewall it worked fine.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 06-20-2007, 11:50 PM   #10 (permalink)
Knows Where the Search Button Is
 
Join Date: Jul 2006
Model: 8310
Carrier: Cingular
Posts: 27
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

if by resetting the firewall you mean going into options, security options, firewall, and then reset settings or reset all counts, than yes i have tried that.

if there is another way to reset the firewall please let me know.

thanks.
Offline  
Old 06-22-2007, 12:15 AM   #11 (permalink)
AXS
New Member
 
Join Date: Dec 2006
Model: 8700g
Carrier: T-Mobile
Posts: 8
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I had a similar problem. My BB once had an IT policy, which I replaced by a blank one after leaving my employer. I experienced the same error message that you describe. The idea is that an application is trying to open a connection internal to the firewall while simultaneously opening another one reaching outside the firewall. This is a referred to as a "split pipe" and since it is a security risk, it is disabled by the IT policy. Therefore it actually has to do with split pipes but involves the firewall, hence the confusing reference to a firewall issue.

I fixed the problem by editing the blank policy to allow split pipes:

; Policies that control the behaviour of third party applications
; on Java-based handhelds.
AllowThirdPartyUseSerialPort {policy} = true
AllowExternalConnections {policy} = true
AllowInternalConnections {policy} = true
AllowSplitPipeConnections {policy} = true
DisallowThirdPartyAppDownloads {policy} = false


and by reloading the bew blank policy onto my BB.

See also the following faq: Shark Modem Blackberry Modem: Shark Modem FAQS almost at the end of the list for an alternative approach.

Hope this helps,
-axs
Offline  
Old 06-22-2007, 12:21 AM   #12 (permalink)
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,686
Post Thanks: 4
Thanked 100 Times in 72 Posts
Default

I believe the policy.bin posted in the Remove IT Policy sticky has the split pipe connection set to true.

@AXS,
Any idea how to re enable keystroke injection when it's been previously disabled by a previous IT policy?
Offline  
Old 06-22-2007, 11:01 AM   #13 (permalink)
CrackBerry Addict
 
jetspeedz's Avatar
 
Join Date: Feb 2005
Model: 9900
Carrier: ATT
Posts: 592
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

John you sure about the blank IT policy not working.. when i was on BES and still am now i tested the blank policy and was allowed to disable firewall and as soon as i got on it pushed the company IT policy back on which was enabled... the blank IT policy should allow you to disable it if im not mistaking.
Offline  
Old 06-22-2007, 12:26 PM   #14 (permalink)
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,686
Post Thanks: 4
Thanked 100 Times in 72 Posts
Default

I haven't treid the IT policy.bin file on anything with 4.2 OS on it. It may allow you to "enable" the firewall. What it won't do is allow Application Permissions that have been restricted by the previous BES such as "keystroke injection" and "Browser Filter." Those are the only two items that my company's BES disallows (I don't even need a password.) Nobody that I know of has been able to unlock keystroke injection if it's been locked by a previous BES. With Keystroke injection disallowed it prevents use of a Bluetooth Keyboard.
Offline  
Old 07-17-2007, 04:35 PM   #15 (permalink)
ajv
New Member
 
Join Date: Jul 2007
Model: 8830
PIN: N/A
Carrier: Verizon
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

So I assume that there is a possibility that the firewall could be "disabled" using the blank policy with the 4.2+ OS? Could someone confirm this? John, even with the firewall disabled, I presume you are referring to the application permissions section under "security options" and not necessarily the firewall? Has anyone loaded the blank policy on a 8830 with any success at changing keystroke injection settings?
Offline  
Old 07-17-2007, 04:37 PM   #16 (permalink)
BBF Moderator
 
John Clark's Avatar
 
Join Date: Jun 2005
Model: Z30
OS: 10.2.1.x
PIN: s & needles
Carrier: AT&T
Posts: 34,686
Post Thanks: 4
Thanked 100 Times in 72 Posts
Default

There is NO way to open the keystroke injection settings without reconnecting to a BES.
Offline  
Old 07-17-2007, 05:51 PM   #17 (permalink)
ajv
New Member
 
Join Date: Jul 2007
Model: 8830
PIN: N/A
Carrier: Verizon
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Are there manuals that would show a BES admin how to do this? Available online? My BES admin does not know how. I have seen some application permission specific instructions for certain keyboard apps, but have not seen any reference to the global firewall settings.
Offline  
Old 11-16-2007, 04:36 PM   #18 (permalink)
Knows Where the Search Button Is
 
Join Date: Aug 2005
Model: 9530
OS: 4.7.0.109
PIN: Changes weekly
Carrier: 9000 Unlocked AT&T, Unlocked 8310 on Telcel (Mexico), Unlocked 8320 as backup. Storm on VZW
Posts: 36
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

So, does this mean that the blank IT policy on 4.2 WILL allow the firewall to be "disabled"??? Has anyone tried this? I am one of those who has the firewall locked and can't get jivetalk to work, keep getting the 2x firewall error message...really frustrating.

If anyone has tried it, appreciate a comment...don't feel like going through the hassle of wiping only to find out it didn't work...actually now that I think about it, my 8830 was on BES for a short time and then I removed my companies policies when I took it off BES back to BIS, and I'm pretty sure the firewall was still locked...hmmm, but then again jivetalk worked so who knows...do I sound frustrated? LOL
Offline  
Old 11-16-2007, 04:43 PM   #19 (permalink)
New Member
 
Join Date: Nov 2007
Model: 8700c
PIN: N/A
Carrier: AT&T
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hello! I just faced this problem today. I have a 8700c 4.2 and I could not disable the password or disable the firewall. I used the blank IT policy and it allowed me to disable the password but not the firewall.
Offline  
Old 11-16-2007, 10:23 PM   #20 (permalink)
Knows Where the Search Button Is
 
Join Date: Aug 2005
Model: 9530
OS: 4.7.0.109
PIN: Changes weekly
Carrier: 9000 Unlocked AT&T, Unlocked 8310 on Telcel (Mexico), Unlocked 8320 as backup. Storm on VZW
Posts: 36
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks for the info...on one hand you saved me alot of time, on the other you just destroyed my last final hope! LOL...how the heck can I get jivetalk to run on an new, unlocked, never been on BES 8320???

Julio
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.