General discussion

Locked

Ed Bott's Microsoft Challenge--4/20/2000

By ebott ·
Many of you suggested that the most important part of configuring a firewall or proxy server is to block undesirable incoming and outgoing ports and allow the ones I need. OK, I'll buy that. In my continuing quest to build a truly private VPN, I need to configure TCP and UDP ports. But I'm having trouble finding an authoritative source of information on port numbers and their purposes. Can you point me (and your fellow TechRepublic members) to the best source of information?

This conversation is currently closed to new comments.

82 total posts (Page 1 of 9)   01 | 02 | 03 | 04 | 05   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by teddyrux In reply to Ed Bott's Microsoft Chall ...

The services file found on every windows based machine is the best place to look.
"This file contains port numbers for well-known services as defined by
# RFC 1060 (Assigned Numbers)."

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by calves In reply to Ed Bott's Microsoft Chall ...

Let's see if I get the points this time...

http://www.chebucto.ns.ca/~rakerman/port-table.html

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by calves In reply to Ed Bott's Microsoft Chall ...

Hey,
I guess I missed the word authoritative when I answered the first time.
http://www.iana.org is an authority ( but their site lacks of easy to use features), that is reason for my first answer.

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by Point Man In reply to Ed Bott's Microsoft Chall ...

In the perfect scenario you would deny all connections (any connection from anywhere to any port) and allow only those connections to ports that you find out you really need to open up. Of course the perfect security world is an unusable system from a users perspective. Hence your question to find a source of information that says "here's a template set of ports that are commonly opened up and why..."

I have found no such list since every environment is different. IANA (Internet Assigned Numbers Authority) is where you would go if as a vendor you wished to register a port to be home for a well-known service. <a href="http://www.isi.edu/in-notes/rfc1700.txt">rfc1700</a> obsoletes 1060 that was mentioned earlier and includes all the ports ever registered. However as the previous poster mentioned, this is a terse format. The previous link is a good one but incomplete as it touches on only some of the most popular well-known ports for video-conferencing, instant messaging etc.Your best bet is to

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by Point Man In reply to Ed Bott's Microsoft Chall ...

your best bet is to find a peer at an organization that does similar work and ask them what they block, what they allow, and why. Also something very interesting and useful would be to find out what their procedure/policies are for blocking or punching a hole in the firewall/proxy.

Have fun,

huba@uidaho.edu

Collapse -

Ed Bott's Microsoft Challenge--4/20/2000

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Back to Windows Forum
82 total posts (Page 1 of 9)   01 | 02 | 03 | 04 | 05   Next

Related Discussions

Related Forums