Watchguard Firebox X1000, Reference Manual

Page: 67 / 264

Packet Filter Services
Reference Guide 55
- One UDP icon for port 138. Set client port to “port” to enable the
NetBIOS datagram service to transfer information between
hosts.
- One TCP icon for port 139. Set client port to “client.” This sets up
a NetBIOS TCP channel for passing information between hosts.
SNMP
Simple Network Management Protocol (SNMP) can be used to collect
information about and configure remote computers. This has proven to be
dangerous. A great many Internet attacks have used SNMP.
Characteristics
• Protocols: UDP, TCP
• Server Port(s): 161 (trap servers use 162)
• Client Port(s): greater than 1023
Because SNMP could cause quite unpredictable changes in a network if
enabled, carefully consider alternatives and log everything.
SNMP-Trap
Simple Network Management Protocol (SNMP) traps are notification
messages that an SNMP agent (for example, a router) sends to a network
management station. These messages generally report an important event
that should be logged or otherwise investigated.
Characteristics
• Protocols: UDP
• Server Port(s): 162
• Client Port(s): greater than 1023
SQL*Net
Oracle uses one port for its sql*net software. By default, this port is either
1526/tcp or port 1521/tcp, but it is user-configurable by editing the
tnsnames.ora file. To allow sql*net through the Firebox, set up a service
icon for the port that your sql*net server is using, with a protocol of tcp,