On 2017/01/30 09:36, lilit-aibolit wrote: > On 01/28/2017 12:13 PM, Stuart Henderson wrote: > > On 2017-01-27, lilit-aibolit<lilit-aibo...@mail.ru> wrote: > > > Hi list, I have an office behind NAT with PF. > > > There are mostly Win7 workstations with > > > different Skype versions but mostly with > > > 7.3x or the latest versions. > > > Two days ago any skype call started to drop > > > after few seconds without any voice from > > > opposite side. > > > I got skype support which remotely looked > > > at affected machines and after a while he > > > resolved this by installing 7.15 version. > > > > They might be sending packets which are passed by some NAT devices > > but not by PF. Use "log" on your block rules and watch pflog0, see if > > something is being blocked. > > > > tcpdump -n -e -i pflog0 > > Hi and thanks for your answer. > It turned out that the latest skype version > is trying to reach host in 104.44.200.x > network by using UDP 3480 port which was > blocked in my pf.conf. > Above network belongs to Microsoft. > So this could be used as trick to block > voice in skype)
There's a more complete list of ports and addresses here: https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#bkmk_lyo
