RFC 1323

[dhottinger at harrisonburg.k12.va.us]

I have a mixed enviroment of apple, windows and linux.  In the apple  
world I have everything from os 9 up to 10.4.x.  My 10.4 clients  
software update utility stopped working last week.  10.3 and under  
still work.  I captured traffic from one 10.4 and 10.3 client at the  
firewall.  Both machines make the initial connection to  
swscan.apple.com.  The 10.3 client shows a SYN packet, the 10.4 shows  
nothing.
Heres 10.4:
Wed Jan 31 09:32:59 2007; TCP; eth2; 238 bytes; from  
swscan.apple.com:http to 10.40.13.17:49206 (source MAC addr  
0080c8ca9fba); first packet
Wed Jan 31 09:32:59 2007; TCP; eth2; 52 bytes; from 10.40.13.17:49206  
to swscan.apple.com:http (source MAC addr 0009b7135180); first packet

Heres a 10.3 computer doing same:
Wed Jan 31 09:38:08 2007; TCP; eth2; 60 bytes; from 10.40.19.107:49442  
to 17.250.248.95:http (source MAC addr 0009b7135180); first packet (SYN)
Wed Jan 31 09:38:08 2007; TCP; eth2; 60 bytes; from 17.250.248.95:http  
to 10.40.19.107:49442 (source MAC addr 0080c8ca9fba); first packet (SYN)

After much googling and head scratching and deleting of cache files  
and .plists on the apples, I found a reference to RFC 1323 and how  
apple's update servers arent RFC 1323 compliant.  My question is how  
to I get my firewall running iptables v 1.2.9 to work with apples  
software update servers.  And maybe Im missing the entire boat and  
this isnt the issue.  I have made no Firewall changes and everything  
worked fine until last week.

thanks,

ddh


-- 
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools