Netscreen firewall limitation for Weblogic RMI Tunneling?

Giganews Newsgroups
Subject: Netscreen firewall limitation for Weblogic RMI Tunneling?
Posted by:  nsr_…@yahoo.com
Date: 12 Apr 2004

I am using RMI tunneling for my weblogic application. I have a
Netscreen firewall and I am not able to tunnel through port 443
because Netscreen only allows this a port number 1024 or lower. So my
current setup with my firewall allows a port address translation like
so

<external_ip_outside_firewall>:8000  (port 8000 because it needs to be
greater than 1024)
    |
    | (forwards to)
    V
<internal_ip_inside_firewall>:7002 (7002 is weblogic's ssl port)

Here is what I want

<external_ip_outside_firewall>:443
    |
    | (forwards to)
    V
<internal_ip_inside_firewall>:7002

Here are my questions:

1.)Is this limitation (tunnelling port 1024 and under) unique to
Netscreen? If not, is this  something I can expect would work with
other firewalls? If not, what is the reason for this limiation?
2.)Suppose # 1 is not an issue, is there any issue with using port 443
as the tunneling port because it is the standard https port?

Replies