Blocking NFS/NIS/Active-X and IRC

[jimmyjoseph]

Hi,

I need some help about blocking NFS ,NIS and IRC from my pix inside network to any untrusted network.

What are the ports used by NFS and NIS ?

What are the well know chat services that needs to be blocked ? IP addresses and port ranges?

Any help is appreciated.

regards,

jimmy.

[svalerio]

Hi,

I'm not an expert of this, but I'll try to give some suggestions.

Very often NFS uses dynamic ports that are "communicated" via the portmapper which listens on port 111, although most NFS servers tend

to use UDP port 2049 (maybe according to a recommendation, not properly a requirement).

As far as IRC is concerned, in general, the port used is 6667. Some servers listen to other ports usually in the 6660-6670 range. On the folloqing web site:

http://www.irchelp.org

you can find a lot of information about this subject.

Hope this helps ...

Regards,

Sonia

Security System Engineer

SANS/GIAC Certified Firewall Analyst (GCFW)

- http://www.giac.org/GCFW_400.php -