my last post was from the subway.. so i think i need to correct some of what i mentioned being back at the source:
#Version: 1.5
#Software: Microsoft Windows Firewall
#Time Format: Local
#Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path
2013-12-06 00:24:18 DROP TCP ***.***.***.22 ***.***.***.11 55903 63098 48 S 1629031669 0 8192 - - - RECEIVE
2013-12-28 01:47:13 DROP TCP ***.***.***.22 ***.***.***.11 65314 49166 52 S 2126462788 0 8192 - - - RECEIVE
2014-01-15 00:19:01 DROP TCP ***.***.***.30 ***.***.***.11 41747 49166 48 S 624425396 0 8192 - - - RECEIVE
.22 is my local workstation at the office, .30 is my laptop, .11 RLM server (win 2012 essentials server). don't bother the different subnets it is routed correctly via ipsec site to site connection.(laptop from home)
so 1st: the source ports are changing.. ok should not be a problem on a standard node/workstation where outbound rules are not set automatically, at least in a standard windows config w/o custom firewall installed.
but as i mentioned in
this post, rlm tries to listen to a not documented port, after i opened that one i was able to license maxwell ok.
now look what happens dez 06-dez 28 destination port changed as well!
so RLM should better be set to allow listen on all ports.
I can't proof my statement that studio needed a different destination port than maxwell gui, as checking now both are trying on 49166, but i believe to remember i had to change something inbound on the .11 machine to get it to license correctly.