RE: firewall ruleset

Hello, One other note.. Log the traffic that is being done, you can track it down based on MAC address. Then develop a company policy about what to do when your users don't follow the non business web company policy (That you've already published right?) Then publish that policy to your use

RE: firewall ruleset

Hello, You shouldn't need to have all the reply ports open. I have ours closed and we are able to do everything we need including FTP. Besides which, what do you mean by reply ports? Are you talking FTP reply? Or something else. Basically the ports > 1023 are just non system/reserved ports

firewall ruleset

Hello, I have some problem with several users on our network. The firewall settings are the following: reject all traffic (incoming, outgoing, forward) accept several ports. I don't want them to surf the web so I closed port 80 for all sites except some (for instance some business related sites)