Re: Which ports for http?

David W. Brown
Sun, 25 Jan 2004 11:44:07 -0000

the_activ@activ.dhs.org wrote ..
> I''m trying to make my shorewall only allow access to http.
> So I made a default reject policy and rules to allow port 80 and 443
> outgoing. Now I know http uses other ports but I have no clue which ports
> I also need to open.
> Sorry for my ignorance but please help me, I tried lot''s and got
nowhere.
> _______________________________________________
> Shorewall-users mailing list
> Post: Shorewall-users@lists.shorewall.net
> Subscribe/Unsubscribe:
https://lists.shorewall.net/mailman/listinfo/shorewall-users
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
Hello, assuming you are using Apache no other ports are needed. What are the
Apache directives: Listen and Port set to? Remember the default Shorewall policy
is to have all ports closed and then only open those needed. This problem should
be straight forward. You really have not stated your problem or what is or is
not working for you. Here are my rules for my public nic:

ACCEPT:debug	net		fw		tcp	80	-
ACCEPT:debug	fw		net		tcp	80	-

Rules for port 443 would be similar.
HTH, David.