Re: popup blockers by Vanguard
Vanguard
Fri Nov 12 16:46:13 CST 2004
"michael" <michaelzylog@aol.com> wrote in message
news:959F6E219zylog@207.46.248.16...
> If you are using a firewall and can edit .. insert
> new rules ..
> enter the following
> 1024 udp block
> 1025 udp block
> 1026 udp block
> 1027 udp block
> 1028 udp block
> 1029 udp block
>
Why? For outbound-initiated traffic, you should have already decided
which applications are allowed access through these ports when your
firewall popped up an alerted asking for permission to let the
application have access (and then you edit the application rule). For
outbound-initiated traffic that engenders return traffic, the firewall's
stateful inspection feature will allow the traffic in only because it
was the result of outbound-initiate and authorized traffic. For
inbound-initiated traffic (that was not return traffic from an
outbound-initiated request for that return traffic), and if you haven't
punched holes in your firewall to allow access to servers running on
those ports, that unsolicited inbound-initiated traffic should get
rejected by your firewall.
You think we are really going to bother modifying our firewall's rules
based on the extremely terse and unqualified remarks you made here?
--
_________________________________________________________________
******** Post replies to newsgroup - Share with others ********
Email: lh_811newsATyahooDOTcom and append "=NEWS=" to Subject.
_________________________________________________________________