Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual download pdf (Page 185)

14.3 Services

185

Description

Comments for the service deﬁned. It is strongly recommended describing each deﬁnition,

especially with non-standard services so that there will be minimum confusion when

referring to the service at a later time.

Protocol

The communication protocol used by the service.

Most standard services uses the TCP or the UDP protocol, or both when they can be

deﬁned as one service with the TCP/UDP option. Other options available are ICMP and

other.

The other options allows protocol speciﬁcation by the number in the IP packet header.

Any protocol carried in IP (e.g. GRE — protocol number is 47) can be deﬁned this way.

Figure 14.7 Setting a protocol in service deﬁnition

Protocol inspector

WinRoute protocol inspector (see below) that will be used for this service.

Warning

Each inspector should be used for the appropriate service only. Functionality of the

service might be aﬀected by using an inappropriate inspector.

Source Port and Destination Port

If the TCP or UDP communication protocol is used, the service is deﬁned with its port

number. In case of standard client-server types, a server is listening for connections on

a particular port (the number relates to the service), whereas clients do not know their

port in advance (port are assigned to clients during connection attempts). This means

that source ports are usually not speciﬁed, while destination ports are usually known in

case of standard services.

Note: Speciﬁcation of the source port may be important, for example during the deﬁnition

of communication ﬁlter rules. For details, refer to chapter 7.3.

Source and destination ports can be speciﬁed as:

• Any — all the ports available (1-65535)

• Equal to —a particular port (e.g.80)

• Greater than, Less than — all ports with a number that is either greater or less

than the number deﬁned

• Not equal to — all ports that are not equal to the one deﬁned

• In range — all ports that ﬁt to the range deﬁned (including the initial and the

terminal ones)

• List — list of the ports divided by commas (e.g. 80,8000,8080)

1 2 ... 180 181 182 183 184 185 186 187 188 189 190 ... 367 368

No comments

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual Page 185