Teamviewer, literals?

[Dick Visser]

On 30 January 2013 20:36, Ted Mittelstaedt <tedm at ipinc.net> wrote:

> We use teamviewer but the way I understand that it works is it
> phones home to the teamviewer server, and the remote user's copy
> of it phones home to the teamviewer server, and the teamviewer server
> then does the magic to connect the 2 phones together.
>
> Thus couldn't you just allow outbound access to the teamviewer server
> and be done with it?


That's what I tried. There are many servers that can be grouped together by
hostname. But there are many servers that are using literal IP adresses,
which cannot be grouped together easily.
Other than iterating through their potentially thousands of servers, doing
a reverse lookup, and adding that to a whitelist. Or by basically allowing
the whole internet.
Both options are, well, no option.


-- 
Dick Visser
System & Networking Engineer
TERENA Secretariat
Singel 468 D, 1017 AW Amsterdam
The Netherlands
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cluenet.de/pipermail/ipv6-ops/attachments/20130201/fc765df2/attachment.htm>