firewall & protocols

emvdlee · Post by **emvdlee** » Thu Aug 15, 2002 9:00 am

Hi just wanting to know which protocols and ports must be considered when setting up firewall rules. Are standard protocols and ports used by HostMonitor?

Thanks,
Erik

KS-Soft · Post by **KS-Soft** » Thu Aug 15, 2002 9:15 am

Of course HostMonitor use standard ports and protocols because it checks standard servises and servers.
Everything depends on tests those you want to implement. If you want to check web server using URL test, you have to open 80 port. If you want to check SMTP and POP3 server, open 25 and 110 port. If you want to use SNMP test, open 160 port. I can continue this list to infinity.

Regards
Alex

emvdlee · Post by **emvdlee** » Fri Aug 16, 2002 12:50 am

Alex,

These test below need to pass the firewall, can you list the protocol and port used with these test? (Excuses for my lack of knowledge)

Check processes;
Check services;
NT Events Logs;

Thanks,
Erik

KS-Soft · Post by **KS-Soft** » Fri Aug 16, 2002 4:14 am

I believe Windows use 139 and 445 ports.

Regards
Alex

jricha34 · Post by **jricha34** » Mon Aug 19, 2002 7:41 pm

Those tests all require RPC and RPC requires ports >1024 opened because RPC uses dynamic port mapping. Solutions we have done for monitoring servers on one side of a firewall is to place a monitor box on the one side of the firewall and then set up socket based apps or perl scripts to pass data from one monitor to another through the firewall.