RE: [OT] Firewall configuration...

["Ian Lowe" <ian@xxxxxxx>]

Paul,

If you configure your inbound Deny rule to drop all packets for which an
entry does not exist in the NAT table (put another way: "if I didn't
make an
outbound connection to this host, ignore it") and let any port out
fromt he
inside, that generally lets everything work nicely.

Messenger since v4.5 doesn't need any special firewall treatment, it can do
the whole show using port 80 if need be..

Ian.

-----Original Message-----
From: Paul Gordon [mailto:paul_gordon@xxxxxxx]
Sent: 27 December 2001 11:53
To: ukha_d@xxxxxxx
Subject: [ukha_d] [OT] Firewall configuration...


OK chaps, time to get my firewall sorted out I guess....

Currently it's wide open, with just one rule (block all NetBIOS)

I'm planning to add a default rule which blocks EVERYTHING, then add
specific rules to open up individual ports/services as required... (is this
the best configuration?)

Looking for any "gotchya's" from those of you who've done this, -
are there
any port numbers I should leave open that I might not have considered?
(What
port does MSN Messanger use?)

Paul G.


_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail.
http://www.hotmail.com



For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/