Re: Port forwarding

On 6/26/2010 8:24 AM, Rick wrote:
What ports do I need to forward
from a NAT router?

Here's what I have so far:
FTP: 20-21
mstsc: 3397-3391
FTPS 989-990
VPN: 1701-1723
IKE: 500;nat-t:4500; esp: 50; ssl 443
?do we need "private": 49151-65535?
?do we need smtp: 25 if we do NOT run an SMTP server?
others?



It depends. Since you mentioned "from a NAT" router, I assume you are not serving any of those an just want to reach those services somewhere. In that case you do not need to forward anything. Moreover your forwarding exposes your computer(s) to attacks. Especially RDC ports.
If I am wrong and you do have services inside and want to open them to outside users, then what you open depends on what you service. You should not and I repeat you should not open ports you do not use and protect.
So, you should not open open the SMTP port if you do not run a mail-relay server inside.
On another note, if you serve FTP, make sure that it is handled properly by the router or use passive FTP.

--- news://freenews.netfront.net/ - complaints: news@xxxxxxxxxxxx ---
.

Relevant Pages

  • Re: FTP behind NAT problem, with Ethereal trace.
    ... > I looked at my NAT router, ... > FTP from external sites fails. ... > Clearly there is a FTP server there since doing a "ftp localhost" works on it. ... If you are using firewall and NAT ...
    (Fedora)
  • Re: FTP Command Line Question
    ... The FTP server IS behind a NAT firewall, ... Your average NAT router cannot process Active PORT-mode FTP connections made ... to non-standard ports. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Port forwarding
    ... from a NAT router? ... ?do we need smtp: 25 if we do NOT run an SMTP server? ... Especially RDC ports. ... On another note, if you serve FTP, make sure that it is handled properly ...
    (comp.security.firewalls)
  • Re: Encrypted FTP through a ASA
    ... it simply can't work (unless the NAT router performs ... An FTP server accepting a passive connection will open a TCP listener ... port and tell the FTP client the IP address and port number. ... tell the FTP client its internal IP address and local port number. ...
    (comp.dcom.sys.cisco)
  • Re: Cannot access redirected FTP in active mode.
    ... Active mode FTP from LAN to WAN does not work. ... For an FTP client behind a NAT router, Active Mode will only work by virtue ...
    (microsoft.public.inetserver.iis.ftp)