[ltCypher]

Hey guys,

I'm new to this forum and I could really use some help. I've got the following problem:

We're supposed to set up the Blackberry Professional Software on our MS Exchange 2003 server. The problem now is, that we can't open up port 3101 on the companys firewall. We don't administrate the firewall ourselves and our ISP (Arcor in this case) does not allow to open up certain ports because of security concerns.

Is there any workaround for a problem of this kind (eg connect to the Blackberry network via another proxyserver of firewall instead of the standard gateway of the server the software is installed on)?

We do have a server with ISA 2006 installed on it, I could open up the ports on this firewall. Problem is I can't change the standard gateway of the Exchange server, because then the server would not be reachable from another subnet in the companys network.

Any idea would be welcome.

[rasobey]

I don't think it's possible:

BlackBerry Search Results

I would go to this ISP of yours and hint strongly that they need to open the port for you.

[DavidAdams]

I've not done it but i think it's the router component that actually talks to RIM, could it be placed on a separate system that can go out via your ISA server?

[NJBlackBerry]

Or suggest that Arcor read up on BlackBerry Security before saying "NO".

[fadmin]

Yes, there is. Change the ISP.

[vhato]

Why would you have an ISA and an ISP with a Firewall?

Anyway, there is absolutely no excuse for an ISP to not honor a "business" clients needs. Unless your boss has some kind of cheapo home user internet agreement, its time for a new ISP ASAP. What kind of ISP isn't aware of Blackberry servers? That is rediculous. What else is next for them, no incoming port 80 traffic for making your own websites? They would be booted today.

[hdawg]

Your ISP needs to allow the following:

KB03735 - Firewall and connection requirements for the BlackBerry Enterprise Server

[CanuckBB]

Originally Posted by ltCypher

Hey guys,

I'm new to this forum and I could really use some help. I've got the following problem:

We're supposed to set up the Blackberry Professional Software on our MS Exchange 2003 server. The problem now is, that we can't open up port 3101 on the companys firewall. We don't administrate the firewall ourselves and our ISP (Arcor in this case) does not allow to open up certain ports because of security concerns.

Is there any workaround for a problem of this kind (eg connect to the Blackberry network via another proxyserver of firewall instead of the standard gateway of the server the software is installed on)?

We do have a server with ISA 2006 installed on it, I could open up the ports on this firewall. Problem is I can't change the standard gateway of the Exchange server, because then the server would not be reachable from another subnet in the companys network.

Any idea would be welcome.

If I understand this correctly, you have 2 internet connections?

One to the Exchange server filtered by the ISP's firewall and one filtered by yur own firewall?

If that's the case, load BESeither on it's own machine, or in a VM and point to to ISA as a gateway.

[ltCypher]

Thanks for your input guys.

Meanwhile I've found out that there's an easier solution to our problem. Obviously we're not the first customers of our ISP who had this kind of problem. Our ISP offers a special service (for an extra fee of 20 euros per month of course...) that enables its customers to communicate with the Blackberry network through a special so called "Blackberry proxy server". I'll have to insert this proxy into the settings of the BES software (instead of the Blackberry servers itself) and it's supposed to work then.

Sound a bit like rip-off to me (not opening ports and thus forcing customers to use a service that costs extra) but if it works I'll take it. Stuff like that happens when people who have no clue of technical backgrounds decide which ISP is better (meaning: cheaper).

[hdawg]

Originally Posted by ltCypher

Thanks for your input guys.

Meanwhile I've found out that there's an easier solution to our problem. Obviously we're not the first customers of our ISP who had this kind of problem. Our ISP offers a special service (for an extra fee of 20 euros per month of course...) that enables its customers to communicate with the Blackberry network through a special so called "Blackberry proxy server". I'll have to insert this proxy into the settings of the BES software (instead of the Blackberry servers itself) and it's supposed to work then.

Sound a bit like rip-off to me (not opening ports and thus forcing customers to use a service that costs extra) but if it works I'll take it. Stuff like that happens when people who have no clue of technical backgrounds decide which ISP is better (meaning: cheaper).

Wow, that is crap! Who is the service provider ? This way we can all know to avoid them and their horrible service.

[svandamme]

that's a load of bollocks

1st off all, you only need an outgoing connection on 3101, not inbound
which frankly is possible on a NAT router, it's not rocket science it does not open the network to attacks, there's no gigantic security risk

2nd your provider is simply trying to cash in, and make you pay twice for the same apple
they have no valid reason to block outgoing on 3101, they just want to make you pay for something you should just get with the regular internet access

get another provider