RE: [FW1] Port numbers

[Helmut Otto <hotto@opst.at>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


Hello

These ports are  the ports to communicate with the firewall. Have you set
Accept Firewall control connections in the properties? If so try to disable
it and define a rule that only dedicated machine can controll the firewall.
Port 259 is for client authentication, so it should be vissible for every
machine, which should use this feature.

Best Regards
Helmut Otto
OPST OEG
hotto@opst.at

-----Original Message-----
From: jvieira@dmr.com [mailto:jvieira@dmr.com]
Sent: Dienstag, 20. April 1999 23:11
To: fw-1-mailinglist@softwhisper.us.checkpoint.com
Subject: [FW1] Port numbers



Hello

I ran a port scan software on my firewall (UltraScan v1.2) to see if
anything
was getting in.
Ports 256,257,258 showed up as active on the port scanner but on the FW logs
they
should up as droped (I have a rule that drops anything destined for the FW).
Port 259
did not show up as active but it did not show up on the logs either.

Some of the ports showed up as predefined services on the log
FW1       port 256
FW1_clntaut    port 259
FW1_log   port 257
FW1_mgmt  port 258


Now should I beleave the port scanner or the FW logs?

Joe




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================