firewall & protocols

emvdlee · Joined: 21 Jul 2002 Posts: 7

Hi just wanting to know which protocols and ports must be considered when setting up firewall rules. Are standard protocols and ports used by HostMonitor?

Thanks,
Erik

KS-Soft · Joined: 03 Apr 2002 Posts: 12795 Location: USA

Of course HostMonitor use standard ports and protocols because it checks standard servises and servers.
Everything depends on tests those you want to implement. If you want to check web server using URL test, you have to open 80 port. If you want to check SMTP and POP3 server, open 25 and 110 port. If you want to use SNMP test, open 160 port. I can continue this list to infinity.

Regards
Alex

emvdlee · Joined: 21 Jul 2002 Posts: 7

Alex,

These test below need to pass the firewall, can you list the protocol and port used with these test? (Excuses for my lack of knowledge)

Check processes;
Check services;
NT Events Logs;

Thanks,
Erik

KS-Soft · Joined: 03 Apr 2002 Posts: 12795 Location: USA

I believe Windows use 139 and 445 ports.

Regards
Alex

jricha34 · Joined: 07 Jul 2002 Posts: 59 Location: USA

Those tests all require RPC and RPC requires ports >1024 opened because RPC uses dynamic port mapping. Solutions we have done for monitoring servers on one side of a firewall is to place a monitor box on the one side of the firewall and then set up socket based apps or perl scripts to pass data from one monitor to another through the firewall.