RE: [FW1] close up ports

["Goetz, Jarrett" <JGoetz@FW1-NOSPAMJenzabar.net>]

Title: close up ports

A general rule of thumb would be to only allow what you specifically need.

 

Best thing to do is use a spreadsheet or something similar to make a list of all hosts and what service need to be accessed on them.

 

Create your policy based off of this, in addition use this to lock down all your systems on a host based level as well....

 

Jarrett

-----Original Message-----
From: chi-lien.lee@zymark.com [mailto:chi-lien.lee@zymark.com]
Sent: Monday, June 04, 2001 11:19
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] close up ports

Hi listers,

I am trying to tighten up my firewall (NT 4.0, sp61 with CP FW-1 4.1, sp3).  Currently I didn't have anything set up yet and I don't have DMZ neither.  I know it's not secure at all but at least I can try to do something about it.  Just wondering if you have a list of ports I should allow it through my fw (eg, fw-related and of course port 80) and deny the rest?  Thanks in advance.

Best Regards,
Chi-Lien Lee
Sr. System Administrator
(508) 497-2233
chi-lien.lee@zymark.com