FW1 and tcp ports 256, 257 and 258

[Vic Metcalfe <vic@acemail.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hi,

I recently installed Checkpoint Firewall-1 on an NT Server, and I found
something odd when I was checking it with a series of port scans.
Everything turned out as expected except for open tcp ports 256, 257 and
258.  What makes this stranger is that these ports were only found open on a
bogus address used for NAT from the Internet to a Domino server inside the
LAN.  There were only three (non-implicit) rules, one for traffic to the
Domino server, one for traffic from the Domino server, and one to reject all
other packets, to make the port scan go more smoothly.

If this is a FAQ then you have my apologies;  please just point me in the
right direction.

Take care,
  Vic.

-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]