Chi,

(this is with the NT4, FW1 4.0 GUI)

On the Manage menu, choose Services,
and choose New.
Make it a TCP service, and in the window that
pops up, you can type in a name for the service, a description,
and the port number in question.
That's all you need. 
You can also specify a range of source
ports. I haven't used this, but I assume this is for rejecting
connections for all but a subset of ports.

Then add the service to whatever rules you have:

Source  Dest            Service Action
internet        websrv  my_httpport     Accept


Cheers,
Anders :)


> -----Original Message-----
> From: Chi Lieu [mailto:[EMAIL PROTECTED]]
> Sent: 30. august 2000 02:47
> To: 'Reed Mohn, Anders'; Chi Lieu; FW1_mailinglist (E-mail)
> Subject: RE: [FW1] http ports
> 
> 
> 
> Hi Anders,
> How do I go about creating a rule in the Fw which allows HTTP 
> for other
> ports?
> Thanks
> Chi
> 
> -----Original Message-----
> From: Reed Mohn, Anders [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, August 29, 2000 5:57 PM
> To: 'Chi Lieu'; FW1_mailinglist (E-mail)
> Subject: RE: [FW1] http ports
> 
> 
> If you create a rule in your FW that allows
> HTTP from the internet, you have only covered port 80.
> You have to make sure you have specified access to the other ports.
> 
> Or, maybe you have rules before the HTTP-rule that will stop external
> clients from entering?
> 
> Cheers,
> Anders :)
> 
> 
> > -----Original Message-----
> > From: Chi Lieu [mailto:[EMAIL PROTECTED]]
> > Sent: 29. august 2000 08:54
> > To: FW1_mailinglist (E-mail)
> > Subject: [FW1] http ports
> > 
> > 
> > 
> > Hi there,
> > I have a web server running IIS sitting in the DMZ.
> > The NAT has been setup properly for this IP.
> > I am setting multiple web sites using just one IP address 
> > ,not by creating
> > virtual directories but by assigning each site to a unique 
> > http port say,
> > 8081, 8088 etc.
> > From the internal LAN, I can get to these sites OK, eg
> > http://XXX.XXX.XXX.XXX:8081 or http:/xxx.xxx.xxx.xxx:8088
> > However from an external machine, I can't get to these sites.
> > Can anyone please advise on what I have missed out in doing?
> > Have you had similar experiences and perhaps can share with 
> > me how to solve
> > this?
> > Appreciate any replies/ suggestions.
> > Thanks
> > Chi Lieu
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ==============================================================
> > ==================
> >      To unsubscribe from this mailing list, please see the 
> > instructions at
> >                http://www.checkpoint.com/services/mailing.html
> > ==============================================================
> > ==================
> > 
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to