Mick Ring <[EMAIL PROTECTED]> writes:

> on 11/12/02 0:38, Scott Holder at [EMAIL PROTECTED] wrote:
> 
> > Unless I'm mistaken, Sherlock makes outgoing connections. Shouldn't be an
> > issue with firewalls. You generally only need to open up ports for inbound
> > connections.
> 
> Since Sherlock receives information, you would have to open up a port for
> it. I'm not completely sure, but I think port 80 would be a pretty good
> guess.

It really depends on the firewall.  I have a firewall set up to block
outgoing connections from below 1024 (which, on unix systems, means
that the program needs root/administrator priveleges to open) and
incoming packets *which aren't in response to outgoing packets*.  The
firewall keeps track of outgoing packets (client-->server) and allows
returning packets from the same port on the server to the same port on
the client.  The Sherlock client probably wouldn't listen to port 80,
because that would interfere with most web sharing programs (which
operate on port 80 by default).  Outgoing, it would be a decent guess.

I'm pretty sure Sherlock would use a TCP connection starting from the
Sherlock program-- so that your Macintosh Sherlock client would
connect to a Sherlock server on a set server port, and then the server
would reply to the port the client sent from.  I could be wrong--
active mode ftp, for instance, works differently.

I just looked at a Mac IP ports page
http://www.opendoor.com/DoorStop/ports.html and saw no mention of
Sherlock.  I'd guess that Sherlock talks to servers on the standard
web port, 80. 

I guess my main point is that there are different levels of firewalls
for different levels of paranoia.  You can block a few incoming ports,
most incoming ports but allow responses, or even block some source
ports and destination ports coming from your network.  Netfilter, the
firewall package I use on Linux, is very flexible.

--
Dana
[EMAIL PROTECTED]  






-- 
PCI-PowerMacs is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronics    http://www.smalldog.com  | Refurbished Drives |
 -- Sonnet & PowerLogix Upgrades - start at $169   |  & CDRWs on Sale!  |

      Support Low End Mac <http://lowendmac.com/lists/support.html>

PCI-PowerMacs list info: <http://lowendmac.com/lists/pci-powermacs.shtml>
  --> AOL users, remove "mailto:";
Send list messages to:   <mailto:pci-powermacs@;mail.maclaunch.com>
To unsubscribe, email:   <mailto:pci-powermacs-off@;mail.maclaunch.com>
For digest mode, email:  <mailto:pci-powermacs-digest@;mail.maclaunch.com>
Subscription questions:  <mailto:listmom@;lowendmac.com>
Archive:<http://www.mail-archive.com/pci-powermacs%40mail.maclaunch.com/>


---------------------------------------------------------------
>The Think Different Store
http://www.ThinkDifferentStore.com
---------------------------------------------------------------


Reply via email to