Re: Simple packet filter

From: Barry Margolin (barry.margolin_at_level3.com)
Date: 06/11/03


Date: Wed, 11 Jun 2003 15:11:28 GMT

In article <c797e024.0306110017.720db515@posting.google.com>,
Jaap de Koning <j.dekoning@spectrafacility.nl> wrote:
>Hello,
>
>I am looking for a simple packet filter, which should only do the
>following:
>
>I have an Windows 2000 server with 2 network cards. All HTTP and other
>internet trafic is handled by our firewall, so no worries there. The
>mail is received on the other network card, and i would like to just
>enable that card for SMTP (port 25). In other words, i would like to
>shut down the entire networkcard except for port 25.

SMTP servers often send out DNS queries, so you'll need to allow the
replies back in as well. These don't have a fixed local port, but the
remote port will always be 53.

>Does anyone know if such software exists? I would like it to be cheap,
>preferably even free.

Doesn't Windows have a built-in packet filter?

-- 
Barry Margolin, barry.margolin@level3.com
Level(3), Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


Relevant Pages

  • RE: Offer Remote Assistance
    ... you must open TCP port 135 for Remote Assistance. ... Please follow these steps to create an IP Packet Filter on the SBS Server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Telnet to Router from Server
    ... Open the ISA Administration tool, and then expand the Server ... click Create Packet Filter. ... Local Port: All Ports ...
    (microsoft.public.windows.server.sbs)
  • Re: FW: Kernel oops v2.4.31 in e1000 network card driver.
    ... > Network card causing the problem is the intel quad port gigabit ethernet ... > Under load the network driver crashes. ... Kernel oops v2.4.31 in e1000 network card driver. ...
    (Linux-Kernel)
  • RE: an error in the NMAP docs?
    ... > and outbound by deny all rules and then add a packet filter ... > rule to allow the machine to act as a DNS server (inbound port ... the server's port 20. ... > Earn your MS in Information Security ONLINE ...
    (Security-Basics)
  • RE: Windows Update
    ... create an outbound TCP packet filter on ... 443 (Local Port Dynamic, Remote Port Fixed on 443) using the following ... From within the ISA Management MMC console, ... accessing the Windows Update Site from the same box. ...
    (microsoft.public.isaserver)

Loading