little help - ports to let through LAN firewall?
Thread Starter
Scooby Regular
Joined: Feb 2006
Posts: 2,519
Likes: 0
little help - ports to let through LAN firewall?
I'm setting up a new firewall appliance this weekend and am just making a note of the typical ports i'll need to open up for the network:
HTTP, 80
RDP, 3389
POP3, 110
SMTP, 25
VNC
PING
FTP, 21
DNS, 53, UDP
HTTPS, 443
anything else ?
HTTP, 80
RDP, 3389
POP3, 110
SMTP, 25
VNC
PING
FTP, 21
DNS, 53, UDP
HTTPS, 443
anything else ?
Last edited by spectrum48k; Oct 24, 2007 at 03:28 PM.
Thread Starter
Scooby Regular
Joined: Feb 2006
Posts: 2,519
Likes: 0
supports Stateful packet inspection, etc...
why would FTP be an "****" ? Can you enlighten me, as I'm a newbie with this stuff - do you mean from a port forwarding point of view over NAT ?
Last edited by spectrum48k; Oct 24, 2007 at 03:30 PM.
Trending Topics
Scooby Regular
Joined: Apr 2004
Posts: 1,928
Likes: 0
From: Cardiff
Yes what big ***** said
My Cisco 877W copes with it fine but my old Draytek 2600 wouldn't, limiting outgoing ports. With no outgoing ports limited it will be fine.
as an example nero website, download via FTP it makes a port 21 connection and a random port above 1024, with block except certain ports this causes problems
IIRC the 3300 has an FTP inspect feature but I didn't see that on the 2930
Id also be wary of allowing VNC out as well, especially if it's unencypted (as VNC can be). RDP is encrypted but users can share there drives, this could introduce a virus onto the network. From a security dudes point of view
My Cisco 877W copes with it fine but my old Draytek 2600 wouldn't, limiting outgoing ports. With no outgoing ports limited it will be fine.
as an example nero website, download via FTP it makes a port 21 connection and a random port above 1024, with block except certain ports this causes problems
IIRC the 3300 has an FTP inspect feature but I didn't see that on the 2930
Id also be wary of allowing VNC out as well, especially if it's unencypted (as VNC can be). RDP is encrypted but users can share there drives, this could introduce a virus onto the network. From a security dudes point of view
Thread Starter
Scooby Regular
Joined: Feb 2006
Posts: 2,519
Likes: 0
Yes what big ***** said
My Cisco 877W copes with it fine but my old Draytek 2600 wouldn't, limiting outgoing ports. With no outgoing ports limited it will be fine.
as an example nero website, download via FTP it makes a port 21 connection and a random port above 1024, with block except certain ports this causes problems
IIRC the 3300 has an FTP inspect feature but I didn't see that on the 2930
Id also be wary of allowing VNC out as well, especially if it's unencypted (as VNC can be). RDP is encrypted but users can share there drives, this could introduce a virus onto the network. From a security dudes point of view
My Cisco 877W copes with it fine but my old Draytek 2600 wouldn't, limiting outgoing ports. With no outgoing ports limited it will be fine.
as an example nero website, download via FTP it makes a port 21 connection and a random port above 1024, with block except certain ports this causes problems
IIRC the 3300 has an FTP inspect feature but I didn't see that on the 2930
Id also be wary of allowing VNC out as well, especially if it's unencypted (as VNC can be). RDP is encrypted but users can share there drives, this could introduce a virus onto the network. From a security dudes point of view
there's only 1 VNC connection, where a trusted remote client will be using it to remotely VPN into a workstation.
As for RDP, there's only me who'll use it to administer the workstations behind the firewall and I trust my Kaspersky to keep me clear of viri !
I'll check out the FTP issue
Last edited by spectrum48k; Oct 24, 2007 at 05:31 PM.
Thread
Thread Starter
Forum
Replies
Last Post
Mattybr5@MB Developments
Full Cars Breaking For Spares
28
Dec 28, 2015 11:07 PM
