[FW-1] Open ports on FW

[John Madden <chiwawa999@FW1-NOSPAMYAHOO.COM>]

Hi,

I've noticed that some ports where open on the FW 4.1
SP5. They appear to be randomly chosen ex. 1000-1600.
They're the security server ports. There's one port
for every Security server (FTP, SMTP etc..)
On one FW i do not use any of the security servers,
they're still open. On another FW, and this is what
got me curious, i use the SMTP security server and
what i will see is traffic from the FW (where the
Security server is at) sending traffic with a randomly
chosen port to the address that was sending an e-mail.
All the security servers port are open aswell on this
machine.

Is there any way to disable these services if you do
not use them ?

Is it normal to see traffic leaving the firewall to
talk to another host in this manner ?

Thank you for you input.

__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================