Re: (ASCEND) Secure Access Firewall,

To: Bill Wilson <fluffy@KeyserSoze.snurgle.org>, "ascend-users@bungi.com" <ascend-users@bungi.com>
Subject: Re: (ASCEND) Secure Access Firewall,
From: Phillip Grasso <phillip@1earth.net>
Date: Wed, 03 Dec 1997 18:47:02 +1100
Organization: One Earth Internet Pty Ltd Wollongong Australia
References: <Pine.LNX.3.96L.971203022525.8834A-100000@KeyserSoze.snurgle.org>
Sender: owner-ascend-users@max.bungi.com

G'day
The secure access firewall doesn't allow you to allow ranges. You must
specify the Protocol & port. download it and have a look, it's a windows
GUI.

Bill Wilson wrote:

> Best bet is to allow the well-known connection ports, then watch the
> traffic to see what happens.  Maybe start by allowing all ports
> 1024<x<5000 and see if they tend to get used.  You might be able to
> trim
> the range a bit if it's important.
>
> In general, making firewalls work with quake means that you have to
> abandon either quake, or the "deny all except what I specifically
> allow"
> policy.  Instead you have to pretty much allow such a wide range of
> ports
> that you're really getting into an "allow all but what I specifically
> deny" policy.  Which if you ask me is perfectly good.  :)  Me
> personally,
> I filter out NFS, NIS, radius, and that's about it.  I'm not a big
> firewall fan... :)



++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

Prev by Date: (ASCEND) Nat and IPX
Next by Date: Re: (ASCEND) Secure Access Firewall,
Prev by thread: Re: (ASCEND) Secure Access Firewall,
Next by thread: Re: (ASCEND) Secure Access Firewall,
Index(es):
- Main
- Thread