Hi All,

1. I'm looking to make use of the security features in our router (I'm
thinking this is firewallish and not too off topic). I was thinking about
taking the "denied unless specifcally granted" approach and only allowing
the few specific service ports we use to pass. However, If I understand it
correctly, clients esablishing a connection would do so through ephemermal
ports and any traffic comming back to those higher ports would be blocked.
Correct? Am I stuck just blocking specific ports? What is the best approach
(in your opinion)?

2. Also looking to use the NAT feature. Pardon the ignorance of this
question but, the area between the router using NAT and our Proxy Server is
a perfect place to set up a DMZ, yes?

Many Thanks,

Mark


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to