[SOLVED] How do I change the Firewall settings in a BT HUB, and what do I change them to?

[FoodSafe]

have an IoT product for Food service businesses, www.foodsafesystem.com
We offer a remote monitoring service for fridges & freezers using wireless temperature sensors and a gateway which plugs into the clients network/router.
A client is having trouble setting up as the gateway won't connect to the internet, I believe the BT HUB firewall settings are blocking it.

What settings do I need to allow access?

 

[bill001g]

Not something we are going to know. Greatly depends on the device you call a gateway. I assume it is proprietary so there is no way to guess how it works.

You general home router will allow all outgoing sessions and ports. It might limit it to web traffic only but that would break many things like computer games so it is unlikely. So if this box just remotely logs into your web site an sends data it should just work.

If the device you have requires incoming sessions or some for of VPN then it could be a rather complex thing to get setup.

Is there anyone more senior than you at your company that understands how this was designed.

 

[FoodSafe]

it should just work , and has done so in a number of occasions.
It uses port 1700 to connect rather than the usual 80 and needs open TCP and UDP each way.
In the BT HUB you can write an exception to firewall rules, it allows the opening of TCP & UDP and an external port numbers ( I specify 1700), however it also asks for internal port numbers, which I don't know.

 

[bill001g]

If it requires a incoming session it maybe that the user does not have a public ip.

As long as the session is first opened outbound from the client machine to your server return traffic will correctly work...at least for some period of time. If you leave it idle too long on UDP it is closed.

You should not have to make firewall settings. The firewall is not active by default or the part that is prevents attacks against the router. Now someone could have set firewall rules up but in general the person who did it knows they did it. It is not some simple check box you turn on.

If you require the session to be initiated by your location and sending the first packet of a session that requires port mapping and a public IP address.