Firewall Question

[Jim Bonnet]

Could someone enlighten me on the finer aspects of firewalling. What I have is a new netgear router/firewall at home. It all works very well, but.. In the logs that it generates I see that The IMAPS server I am connecting to wants to make a connection back to me on some high port.

My question is should I open these high ports to allow this? None of the rules I have created allow this so it goes to the default rule wich is deny.

Further, I have googled and also been reading the oreilly book about building internet firewalls, and it says nothing about IMAP making a connection back to the client on a high port.

Here is a snip from the log:

2003 Jan 11 10:09:12 (FM114P-2a-5f-a4) 63.206.87.66 TCP packet - Source:63.206.87.67,993,WAN - Destination:63.206.87.66,33815,LAN [Drop] - [Inbound Default rule match]

When this happens I lose the connection to IMAP and I need to relogin, so this must be a discovery packet or something I suppose.

What would the suggestion be?

Thanks-
Jim

btw: 63.206.87.66 is the router, 63.206.87.67 is my mail server in the DMZ, and I am on a 192.168.x.x machine doing NAT behind this router.


_______________________________________________
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users