Opening Firewall for Inbound Requests from Second Life

Hi folks,

We have server behind a corporate firewall who is waiting to receive inbound requests from Second Life. Our firewall administrator is willing to open ports to allow inbound access to our server, but he is requesting for the source IP address from Second Life.

Does anyone know whether Second Life has a static IP address that I can tell my administrator ?

This is quite urgent, and I appreciate any help on this matter.

Thanks much !

SL has 1000's of ip's, every sim has a diffrent one (well kinda theres 2~4 on each), so if he where to do that he would need to put in a ip range *.*.xxx.xxx ~> *.*.xxx.xxx

Doubt that would work, havnt seen much info about ip range either.

Thanks Thili, looks like this will be tough.

Are we talking about doing LSL http or xml-rpc stuff here? I think all of that stuff will be inbound from lindenlab.com or secondlife.com. Can they allow that on the firewall or do they actually need a specific IP address?

We are making an LSL HTTP call, it looks something like this:

<code>
key requestID = llHTTPRequest(ENDPOINT_URL, [HTTP_METHOD, "POST", HTTP_MIMETYPE, "application/x-www-form-urlencoded"], "p_app_name=" + APP_NAME + ......);
</code>

They are looking for a specific IP (preferably) or IP range (tough). I'm hoping for a specific IP here. *cross fingers*

http://wiki.secondlife.com/wiki/Simulator_IP_Addresses

I wouldn't use it as a definitive guide though.

You're network team might be able to tell you what is hitting the firewall that they are rejecting. From that, you might be able to deduce what eneds to be allowed.

Thanks, we managed to convince our network team to open it up for all inbound requests, no matter where they are coming from.

Today, we are getting issues where LLHTTPRequest are not coming into our servers. It's strange, as we can access it from normal browsers, just that requests coming in from Second Life are not registering on our servers.

.

i dont know if this will be helpful ...
but i use a firewall called Sygate Pesonal Firewall ...
at ... download.com/3000-2092-10049526.html

with this little program you can check the Traffic Logs,
do a Back Trace on any IP that attacked your computer,
then a Whois ... and it will give you the name, address and
phone number of the attacker ... as well as the severity of the attack,
and whether it was "Allowed" ...

as i type, i am inworld ...

i did a check of my logs just before this post ...
it lists 1543 items ... showing Remote & Local Hosts and Ports
most of which are out going to Linden Labs ... and a few incoming from LL ...

i would say that on the entire list,
there are about 3 differ IP's incoming from LL under Remote Host
and only one IP listed under Local Host ... which is my IP number

.