Hardware Firewall Question

Associate
Joined
28 Nov 2005
Posts
431
Location
Scotland
If a port is openned on a hardware firewall, for example, TCP port 25, or any other port for that matter, would any TCP traffic on port 25 be allowed through the firewall? As commonly you would open TCP port 25 for SMTP obviously so SMTP traffic could pass through, but would any other TCP traffic on port 25 also be able to pass through?
 
if the firewall was just looking at open ports yes, as all it would be doing would be opening port 25 to the outside world. If you had a hardware firewall that was cheking the application layer it would block non-complaint (non smtp) protocols on port 25 if you told it too. The average home router would only open the port it would not check the application layer. A business class firewall could do this though

you could only have one service on the port though at any one time. But for example people sometimes change the remote desktop port from 3389 to something else (i.e. 10000) then open port 10,000 for rdp.

If you had an smtp service running on the port you could not have another service running on the same port
 
Last edited:
There are consumer products that offer SPI and going for an application layer protection for home use is probably a little overkill.
 
Last edited:
Back
Top Bottom