RE: Port Blocking in Firewall

As Tom pointed out, the natural behavior/principle of firewall is to block
everything. Administrators will determine which port to open, depending on
what kind services is needed (e.g. FTP, HTTP, etc.)

My understanding is even with MIDCOM deployed, this is a manual process,
right? Does MIDCOM have the capability to communicate with firewall to open
the wanted port? e.g. To open the 5060 port if SIP application is needed?

Regards 
Stewart

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
Taylor, Tom-PT [CAR:5N00:EXCH]
Sent: Monday, December 06, 2004 6:33 PM
To: Pyda Srisuresh
Cc: [email protected]
Subject: Re: [midcom] Port Blocking in Firewall

That's right.  Basically the attitude was that administration would block 
everything by default, and MIDCOM would enable exceptions (subject to policy
at 
the server).

Pyda Srisuresh wrote:
> My understanding is that the WG decided to go with specifyign just the
> permitted ports, not the blocked ports, during the semantics discussion. 
> 
> regards,
> suresh
> --- Tom Green <[email protected]> wrote:
> 
> 
>>Hi,
>>
>>I am kind of new to MidCom. RFC 3303(MidCom
>>Architecture and Framework)says that MidCom protocol
>>will enable us to open select ports in the firewall.
>>Is it possible to block some ports using this
>>framework?
>>
>>Thanks,
>>TG 
>>
>>
>>		
>>__________________________________ 
>>Do you Yahoo!? 
>>Take Yahoo! Mail with you! Get it on your mobile phone. 
>>http://mobile.yahoo.com/maildemo 
>>
>>_______________________________________________
>>midcom mailing list
>>[email protected]
>>https://www1.ietf.org/mailman/listinfo/midcom
>>
> 
> 
> 
> =====
> 
> 
> _______________________________________________
> midcom mailing list
> [email protected]
> https://www1.ietf.org/mailman/listinfo/midcom
> 
> 

-- 
Tom Taylor
Carrier VoIP Standards Development
Nortel Networks
Phone +1 613 763 1496  (ESN 393-1496)
E-mail: [email protected]

_______________________________________________
midcom mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/midcom