Watchguard Firebox X1000, Reference Manual

Page: 75 / 264

Proxied Services
Reference Guide 63
whois
The whois protocol gives information about who administers Internet
sites and networks. It is often useful for finding administrative contacts at
other sites.
Because very few sites run whois servers, the only service necessary to
access these sites is an Outgoing or a Proxy icon. In the absence of these,
use a whois icon allowing outgoing connections to the required whois
servers, the most common one being
rs.internic.net
.
Characteristics
• Protocol: TCP
• Server Port(s): 43
• Client Port(s): greater than 1023
Proxied Services
This section describes the services proxied by the WatchGuard Firebox
System, including a separate description of the transparent proxies,
HTTP, SMTP, and FTP. The proxied service opens packets of its particular
type, strips out any embedded forbidden data types, and reassembles the
packets with the proxy’s own origin and destination headers.
Configuring and activating proxies is done the same way you add packet
filtering services.
DCE-RPC
The Distributed Computing Environment (DCE) Remote Procedure Call
(RPC) service allows connections bound for a trusted machine's port 135.
Initial calls typically result in a response from the trusted machine that
redirects the client to a new port for the actual service the client wants.
This service allows the initial port mapper requests used by remote
Windows Name Service (WINS) administration, remote Exchange
administration, Outlook, and other software that relies on DCE RPC. Be
aware that the standard SMB or NetBios ports may also need to be
allowed so that the above software will work properly.