General discussion
| Thread display: Collapse - |
All Comments
Back to Community Forum
3 total posts
(Page 1 of 1)
Start or search
Create a new discussion
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
Related Discussions
-
0
-
0
-
16
-
0
-
0
Cannot access FTP pages on web using wireless/Router/ADSL modem
For example ftp://ftp.isi.edu/in-notes/rfc1579.txt
When I try to access the page the screen is blank for at least 1 - 2 minutes then displays a standard Microsoft "Cannot find Server" errror message.
However if I go to minimum preset setting for Firewall I can access this page. Therefore the issue must be with the firewall setting on the Router.
The settings for the low setting on the firewall (that allows FTP web site access) are:
===================================
title [ Security Level 1 IN rules ]
begin
Rules
pass all
AddresDrop
drop from addr 0.0.0.0 >> done, alert 4 [ 0.0.0.0 Source IP Address]
pass protocol udp, to port 53 >> done
pass protocol udp, from port 53 >> done
drop protocol icmp >> alert 4 [ICMP Message To WAN IP]
end
===========================================
The settings for the recommended setting on the firewall (That blocks FTP web site access) are:
============================================
title [ Security Level 2 IN rules ]
begin
TTLDrop
drop match 3 8 { 01:FE } >> alert 4 [TTL of 0 or 1]
AddresDrop
drop from addr 0.0.0.0 >> done, alert 4 [ 0.0.0.0 Source IP Address]
pass protocol udp, to port 53 >> done
pass protocol udp, from port 53 >> done
pass icmp-type reply >> done
pass icmp-type unreachable >> done
pass icmp-type exceeded >> done
drop protocol icmp >> done, alert 4 [ Invalid ICMP Type ]
Rules
pass all
end
=========================
I want to block all ports apart from ones I use so your help will ensure I customise this firewall correctly without limiting my use of the Internet.
Thanks in advance for your help.
This conversation is currently closed to new comments.