RE: firewall ports

["Jones, John (US)" <John.Jones@xxxxxxxxxx>]

Https is normally on port 443.

Unless the FTP is anonymous, I would strongly recommend you use a secure
FTP solution (secure FTP, VPN, etc.) as with normal FTP the user ID &
password are sent as clear text.  

I'd also recommend the that FTP requests only be allowed to the specific
server; all other FTP requests should be blocked to avoid allowing FTP
requests to penetrate the LAN.

John A. Jones, CISSP
Americas Information Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787  F: +1-312-601-1782
john.jones@xxxxxxxxxx

-----Original Message-----
From: Jim Franz [mailto:franz400@xxxxxxxxxxxx] 
Sent: Thursday, April 07, 2005 7:18 AM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: firewall ports

I've been handed a firewall spec sheet for existing site.
We need http (port 80) and in near future https (port ???) I also need
to execute ftp between this iSeries and another across the net. I know i
need ports 20,21, but do i need to specify anything above 1024? because
of the way ftp transfers redirect to other ports?
The only statement I can get from Bellsouth is "everything is shut off
by default".
Future will also have outbound email forwarded to isp server.
tia
jim
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.




This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in the future then please respond to the sender to this effect.