This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New user. Basic port forwarding questions and more.

I plan to do a home version install next week. I researched the install and feel confident about it. It doesn't look too hard to get it set up for a basic network. Looking forward to playing with the security aspects, basically, at the front door.

I have a few basic questions that someone with experience can answer easily. They mostly deal with firewall issues for appliances inside the network. A link to a site with instructions for this or something similar would be great.

1) I have a couple of slingboxes that use ports 5001 and 5002, respectively. What's the basic steps in getting them accessible from outside the home?

2) I use ooma. Same question. According to ooma, it configures itself from inside out. Does anyone know for sure? I have the port list if I need to do something.

3) I use a VPN service. Do I need special configuration to account for ports it uses if I'm going from inside to outside? Later, I plan to set up OpenVPN, but that's a separate issue for later and will probably be used to access internal network resources from outside.

4) I want to use DHCP to assign addresses initially but then fix some addresses permanently at the router. What screens do I use to do this.

5) If I shut off foreign country access from outside in, is that a good idea to keep foreign hackers out or will I be making problems for myself in other ways?

6) I have ad blockers on all browsers. Can I move some of that to the sophos utm? If so, is it easy to allow it for some sites that require full access to use properly?

Thank you.

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 9 years ago

so could you just pretend it's just one question
Not really.  Too much to cover and makes this thread difficult for others to search for that may experience the same issues in future.  As Bob said, one question per thread and threads should be in the appropriate forum by topic.  Here's some very basic answers to your questions.  With some additional research on your part, they can get you pointed in the right direction.

1) I have a couple of slingboxes that use ports 5001 and 5002, respectively. What's the basic steps in getting them accessible from outside the home?
Create a DNAT

2) I use ooma. Same question. According to ooma, it configures itself from inside out. Does anyone know for sure? I have the port list if I need to do something.
Depends on the ports used and how the service works.  With the limited information given, it might just be outbound firewall rules.  If it uses HTTP or HTTPS it could also require configuration of the web filtering proxy.

3) I use a VPN service. Do I need special configuration to account for ports it uses if I'm going from inside to outside? Later, I plan to set up OpenVPN, but that's a separate issue for later and will probably be used to access internal network resources from outside.
With the limited information given, it might just need outbound firewall rules.  UTM uses OpenVPN for SSL VPN, which can be used for client access from "outside".

4) I want to use DHCP to assign addresses initially but then fix some addresses permanently at the router. What screens do I use to do this.
Network Services > DHCP.  Static Mappings Tab for static IPs.  Static Mapping addresses MUST be outside the scope of addresses offered by the DHCP server instance.

5) If I shut off foreign country access from outside in, is that a good idea to keep foreign hackers out or will I be making problems for myself in other ways
It can be used to keep foreign entities from connecting to you, but can also cause connection issues with things that you want, as many companies and services use distributed global sets of servers.

6) I have ad blockers on all browsers. Can I move some of that to the sophos utm? If so, is it easy to allow it for some sites that require full access to use properly?
Yes.  There are existing threads about how to block ad serving domains.  It can be easy or a pain in the butt.  All depends on how you set things up.

If you want to discuss any of these in more detail, you'll need to create new threads in the appropriate forums.

I would also highly recommend searching these forums and reading the admin guide/built-in help.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 9 years ago

so could you just pretend it's just one question
Not really.  Too much to cover and makes this thread difficult for others to search for that may experience the same issues in future.  As Bob said, one question per thread and threads should be in the appropriate forum by topic.  Here's some very basic answers to your questions.  With some additional research on your part, they can get you pointed in the right direction.

1) I have a couple of slingboxes that use ports 5001 and 5002, respectively. What's the basic steps in getting them accessible from outside the home?
Create a DNAT

2) I use ooma. Same question. According to ooma, it configures itself from inside out. Does anyone know for sure? I have the port list if I need to do something.
Depends on the ports used and how the service works.  With the limited information given, it might just be outbound firewall rules.  If it uses HTTP or HTTPS it could also require configuration of the web filtering proxy.

3) I use a VPN service. Do I need special configuration to account for ports it uses if I'm going from inside to outside? Later, I plan to set up OpenVPN, but that's a separate issue for later and will probably be used to access internal network resources from outside.
With the limited information given, it might just need outbound firewall rules.  UTM uses OpenVPN for SSL VPN, which can be used for client access from "outside".

4) I want to use DHCP to assign addresses initially but then fix some addresses permanently at the router. What screens do I use to do this.
Network Services > DHCP.  Static Mappings Tab for static IPs.  Static Mapping addresses MUST be outside the scope of addresses offered by the DHCP server instance.

5) If I shut off foreign country access from outside in, is that a good idea to keep foreign hackers out or will I be making problems for myself in other ways
It can be used to keep foreign entities from connecting to you, but can also cause connection issues with things that you want, as many companies and services use distributed global sets of servers.

6) I have ad blockers on all browsers. Can I move some of that to the sophos utm? If so, is it easy to allow it for some sites that require full access to use properly?
Yes.  There are existing threads about how to block ad serving domains.  It can be easy or a pain in the butt.  All depends on how you set things up.

If you want to discuss any of these in more detail, you'll need to create new threads in the appropriate forums.

I would also highly recommend searching these forums and reading the admin guide/built-in help.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data