RE: [FW1] Defining an HTTP Service for A range of Ports?

[Ray Lodato <RLodato@nefn.com>]

You can define a service (at least a TCP service) with a range of ports by
putting the range in the Port field.  I defined a TCP service called
TradeWebPorts, and put 3520-3530 in the Port field.  The "Managing
Firewall-1 Using the Windows GUI" book says you can put a single port, a
range of ports, a "greater than" (> ###) or a "less than" (< ###) condition.

Ray Lodato
NEF Informations Services
617-578-3197
rlodato@nefn.com

> -----Original Message-----
> From:	Richard D. Pringle [SMTP:rpringle@inm.eds.com]
> Sent:	Wednesday, April 21, 1999 11:27 AM
> To:	fw-1-mailinglist@lists.us.checkpoint.com
> Subject:	[FW1] Defining an HTTP Service for A range of Ports?
> 
> 
> Hi,
> 
> just wanted to find out if it's possible to do the following:
> 
> - create a new service object that can handle all my HTTP
> webserver instances occurring on TCP URI ports of 7000
> through 7050.
> 
> I want to NOT create a new service for each one and then
> group them.  I looked at the available service objects that
> I can define, but it seems there is no place for me to indicate
> the 'URI' aspect of the service.
> 
> The URI is required to differentiate between high tcp ports
> and high tcp ports that use the HTTP, right?
> 
> Any help would be appreciated.  NOTE: I'm aware of
> some INSPECT, but haven't done any thing with it, so if
> a suggestion is to write it in INSPECT, could you please
> forward an example, if it's not too much bother.
> 
> Thanks again.
> 
> --
>         Richard D. Pringle
>         Internet Security Engineer
>         c2o Interactive Architects, an EDS business
>         (972)604-5188 / Security@inm.eds.com
> 
>         'If You Don't Encrypt, You Surrender Your Right To Privacy'
> 
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================