Hi All,

I inhereited a firewall at my new job and the previuos guy had it set up as
follows,

How secure are these filters?
Does anyone have an idea on how to improve on them?

Cheers
Dieter

FILTERS
  OUTBOUND
     1 #Full Access
       Accept "PROTECTED" ALL
          from "ANY_IP"
            to "ANY_IP"

  REMOTE ACCESS
     1 #Allow web
       Accept ANY TCP
          from "ANY_IP"
            to "ANY_IP" 25 80 110 443 8888 77 1521

     2 #DNS
       Accept ANY UDP
          from "ANY_IP"
            to "ANY_IP" 53

     3 #Allow ping and traceroute
       Accept ANY ICMP
          from "ANY_IP"
            to "ANY_IP"

     4 #Allow protected network access to WWW remote admin server.
       Accept "PROTECTED" TCP
          from 10.1.1.214/255.255.255.0
            to 10.1.1.1/255.255.255.255 8888

     5 #Allow protected network access to RMC remote admin server.
       Accept "PROTECTED" TCP
          from 10.1.1.214/255.255.255.0
            to 10.1.1.1/255.255.255.255 77


Reply via email to