NFOHump.com :: View topic - Software to allow certain IPs to access ports?

Page 1 of 1

DeMoN064

Posts: 1308

Posted: Thu, 14th Jun 2007 04:00 Post subject: Software to allow certain IPs to access ports?	Quick Quote Quote

I've got zonealarm installed at the moment, Not sure if that will do the trick. Basically I want to block port 21/80 from all IPs apart from the ones I choose. Can I use zonealarm or do I need other software?

$en$i
VIP Member

Posts: 3127

Posted: Thu, 14th Jun 2007 14:26 Post subject: Re: Software to allow certain IPs to access ports?

DeMoN064 wrote:

I've got zonealarm installed at the moment, Not sure if that will do the trick.
Basically I want to block port 21/80 from all IPs apart from the ones I choose.

Can I use zonealarm or do I need other software?

I don't have practiced ZA free for a long time since it is crappy (cf. http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php#firewalls-ratings ) but that would be lame if it wasn't allowing you to create such a security rule.
Rather get comodo and setup such security rule in seconds. Wink

cf. http://www.comodo.com/
If you have vista there is only an alpha release right now, not suitable for production environment: http://forums.comodo.com/cfp_beta_corner/comodo_firewall_pro_v3_alpha_setup_xp_sp2_and_vista_versions-t9588.0.html

The security rule should looks like that in comodo (security > Network monitor > Network control rules):

Code:

BLOCK TCP or UDP IN FROM IP [Any] TO IP [Any] WHERE SOURCE PORT IS [Any] AND DESTINATION PORT IS 21-80

Profile
PM

deelix
PDIP Member

Posts: 32062
Location: Norway

Posted: Thu, 14th Jun 2007 14:30 Post subject:	Quick Quote Quote

god friggn hate Zone Alarm.. don't use it :\

DeMoN064

Posts: 1308

Posted: Thu, 14th Jun 2007 16:20 Post subject:	Quick Quote Quote

Yeah I agree, I have been having a few problems with it. I'll check out those links.

DeMoN064

Posts: 1308

Posted: Thu, 14th Jun 2007 17:11 Post subject:	Quick Quote Quote

Ok, I think I've got it setup now. But I can't seem to access my internet IP on port 80 using this PC. What rule would I need to add to comodo to do this?

$en$i
VIP Member

Posts: 3127

Posted: Fri, 15th Jun 2007 03:45 Post subject:

DeMoN064 wrote:

Ok, I think I've got it setup now. But I can't seem to access my internet IP on port 80 using this PC.

What rule would I need to add to comodo to do this?

Lol yeah the rule i given you earlier make your port 80 unavailable to all, you included.
First you may have to define your local network (e.g. IPs from 192.168.0.0 to 192.168.255.255) as a trusted zone (security > tasks > define a new trusted network).
Then if it isn't enough i would add a new rule and put it just above the earlier one in the list:

Code:

ALLOW TCP or UDP IN FROM IP [192.168.0.0] TO IP [192.168.255.255] WHERE SOURCE PORT IS [Any] AND DESTINATION PORT IS 80

I can't test it right now thus if it doesn't work give a try to comodo faqs, or modify the earlier rule to remove temporary the port 80 from those blocked.

cf. http://forums.comodo.com/help/faqsthreads_read_me_first-t9364.0.html

Profile
PM

Page 1 of 1

All times are GMT + 1 Hour