Watchguard Firebox X20E, Руководство пользователя

Страница: 141 / 310

User Guide 129
Blocking Ports
3
Select the Auto-block hosts that send traffic that is denied by the default policy check box to
add the IP addresses of any site denied by the Edge’s default firewall policy to the temporary
Blocked Sites list. To understand your Edge’s default firewall policy, look at
Firewall > Incoming .
If you enable the auto-block feature, the source IP address of any traffic that is denied by the
Edge because there is no rule to allow it will be added to the auto-blocked sites list.
4
Change the amount of time a site stays on the auto-blocked sites list with the Duration for
automatically blocked sites drop-down list.
5
You can create exceptions to the auto-blocked sites rules. No traffic from an IP address on the
Auto-block exceptions list is ever blocked by the auto-blocking feature. Use the
drop-down list
to select whether you want to enter a host IP address, a network address, or a range of IP
addresses. Type the value in the adjacent text box and click
Add .
Blocking Ports
You can block the ports that you know can be used to attack your network. This stops specified exter-
nal network services. When you block a port, you override all the rules in your firewall configuration.
You can block a port because:
•
Blocking ports protects your most sensitive services. The feature helps protect you from errors in
your Firebox® configuration.
•
Probes against sensitive services can make independent log entries.
By default, the Edge is configured to block these ports:
X Window System (ports 6000-6005)
The X Window System (or X-Windows) client connection is not encrypted and is dangerous to
use on the Internet.