Every EA Sports game for PS2 has its own range of ports needed to work
correctly, along with EA's version of a buddy list.  It has become a
management nightmare to keep these ports open.  I began tracing students
gaming activity (with their permission of course) via firewall logs while
they play the game, or attempt to at least, so I can snag the domain the
requests are going to instead of the ports, thus opening access to those
domains only.  Obviously the ports you listed are opened, but for companies
like EA, I have been trying to use the domain method.  I have not had
complete success with this, but it is getting better.  I am also interested
in a list from anyone who has complete happiness from their PS2 community.

-----Original Message-----
From: Perfigo SecureSmart and CleanMachines Discussion List
[mailto:[log in to unmask]] On Behalf Of Aaron Havens
Sent: Tuesday, July 26, 2005 2:28 PM
To: [log in to unmask]
Subject: Re: Implementing CCA now for Fall

John Edrington wrote:
>> Can I ask what you do to register devices like Xbox, Play
>> Station, etc.?
> 
> We don't officially support any client that can't 
> authenticate via the web based interface, as we don't have 
> the resources to be manually adding devices, especially since 
> they are becoming more and more common.
> 
> The "unofficial" workaround our helpdesk gives out to those 
> who ask is to use some sort of internet connection sharing 
> (most use the default 2 nic cards & a windows box) that 
> supports the required login method. They logon to the network 
> using their windows box and hook their Xbox into a second 
> network card on the windows box.
> 
> There are certainly disadvantages to promoting this method to 
> the student body (like what if a student gets the bright idea 
> to hook up an unauthorized wireless access point to their box 
> that is doing the internet connection sharing) but at this 
> point it is the only way a student can use Xbox live or ps2 
> over our network.
> 
> John Edrington
> Oakland University

We have added exclusions to our default role to allow Xboxs, 
Playstations and Gamecubes to work. Since getting our roles setup 
correctly students can just connect the XBox and it works.

We have taken a somewhat lax approach to the rules by opening all those 
ports. However the main goal of us installing CCA is to make sure 
students have updates and anti-virus.

The Ports I have open are as follows:

Allow  	UDP  	*:*  	*:53
Allow 	UDP 	*:* 	*:88
Allow 	UDP 	*:* 	*:3074
Allow 	TCP 	*:* 	*:3074
Allow 	TCP 	*:* 	*:4000
Allow 	UDP 	*:* 	*:10070 				
Allow 	TCP 	*:* 	*:10070
Allow 	TCP 	*:* 	*:10071
Allow 	TCP 	*:* 	*:10072
Allow 	TCP 	*:* 	*:10073
Allow 	TCP 	*:* 	*:10074
Allow 	TCP 	*:* 	*:10075
Allow 	TCP 	*:* 	*:10076
Allow 	TCP 	*:* 	*:10077
Allow 	TCP 	*:* 	*:10078
Allow 	TCP 	*:* 	*:10079
Allow 	TCP 	*:* 	*:10080

All of these ports were taken from the Perfigo support site. If anyone 
sees any changes I should make let me know.

-- 
Aaron Havens
Network Technician
Computing and Telecommunications
Northeastern State University
610 N. Grand
Suite 318
Tahlequah, OK 74464
http://netnotes.nsuok.edu/~havensa/
918-456-5511 Ext. 5813