 | ||
 Help with Rules - NOKIA 1P40 | ||
| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
 |
| | LinkBack | Thread Tools | Display Modes |
 2005-09-25 | |||
| |||
 Help with Rules - NOKIA 1P40 I have purchased a NOKIA IP40 with Sofawares integrated Checkpoint Firewall-1 software which allows up to 15 rules to be defined. I am not 100% sure on how to order the rules, or if I really need them all. Please offer some advice if you're a good rules writer. I have two PC's which use MIRC allot and have specific IP ranges defined for each, as well as some other video/web/agents running. I have added rules to allow and forward for these. The blocks on ports 123 and 1234 were to block some unknown trojan that is attaching to my PC everytime I power it on using those ports. Here's the current setup and order: # Firewall rules clear fw rules add fw rules service custom action block src any dest any ports 1234 protocol tcp add fw rules service custom action block src lan dest wan ports 123 protocol udp add fw rules service custom action block src lan dest 207.46.130.100 ports 1-65000 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 3340-3350 protocol tcp add fw rules service custom action block src 207.46.130.100 dest 192.168.0.87 ports 1-65000 protocol udp add fw rules service custom action block src wan dest lan ports 123 protocol udp add fw rules service telnet action block src wan dest any ports 23 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 1532-1538 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 59 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 5100 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 8000-8885 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.87 ports 4000-4500 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 8887-9000 protocol tcp add fw rules service custom action allowandforwared src wan dest 192.168.0.151 ports 2000-2005 protocol tcp  |
|
| Thread Tools | |
| Display Modes | |
| |
Linear Mode
