HomeSearchMerchandiseAboutMichael HorowitzMy CNET Blog

Skype Gripes Skype does VOIP

Skype and Firewalls 

July 29, 2005. The web page describing the firewall needs of Skype contains mistakes. 

First, it says: 

Skype needs unrestricted outgoing TCP connections to some TCP ports. If you fail to connect to Skype network, it is likely that your firewall is blocking these and you need to open up some outgoing TCP connections. Note that this is about outgoing connections, not incoming connections.

Despite this, the instructional video showing how to configure ZoneAlarm Pro for use with Skype, shows that Skype needs "Server Rights" in ZoneAlarm.  Server rights are incoming, not outgoing.  The first two green checkmarks in ZoneAlarm are for outgoing purposes.

The instructional video for configuring ZoneAlarm is also inconsistent with regard to whether Skype need "Send Mail" rights. The text in the video says:

... right click under "Send Mail" and set the option to "Block". There should be four green checkmarks displayed on the left and one red "X" displayed on the right.

Yet, as shown above, in a screen shot from their ZoneAlarm demo, there clearly are five green check marks for Skype. Oops. 

Moral of this story: nobody reads documentation (but me). 

The firewall page also says: 

Ideally, outgoing TCP connections to all ports (1..65535) should be opened ... This is only necessary for your Skype to be able to connect to the Skype network and will not make your network any less secure.

I disagree, it will make you less secure. There is a reason firewalls provide outbound protection in the first place. Turning it off globally is not a good thing. 

There is no way to make comments on the web site itself. Of course, this is why it has mistakes.  I told them about this by filling in a form on their contact us page. Their auto-responder said not to expect a reply.