|
Posted by Karl Levinson, mvp on June 14, 2005, 11:28 pm
Please log in for more thread options
It's there because Microsoft put them there. They have the ability to put
in multiple ports, but you and I don't.
The question for me is not how or why those multiple port items are there.
The question for me is why MS thinks they have a good reason for needing
this ability to configure multiple ports, but we the customers don't... why
MS thinks they know all the services that we the customers might want to
aggregate into a single service or rule for ease of administration... why MS
doesn't think we might want to set up a complicated ACL rule set just once
instead of repeating this one by one for every port in the list... Why MS
wants to have the only firewall product on the planet that doesn't allow
this functionality. It makes no sense whatsoever to me. This should have
taken about 5 minutes of coding to fix if it had been put into WF from day
one, although now there will probably be a good deal of regression testing
to add and properly test this functionality. I really think the MS risk
assessment and thinking outside the box led them down the wrong road with
various parts of the Windows Firewall. A significant portion of the
customer base thinks WF is only half a firewall, due to a variety of
reasons.
> Please help me understand if multiple ports can not be defined for one
entry,
> then why there are TCP 139 and 445, and UDP 137 and 138 are listed for the
> "File and Printer Sharing" on the tab "Exceptions".
>
> Thanks and Regards,
>
> "David Beder [MSFT]" wrote:
>
> > port ranges are not supported. instead, the application/service itself
> > should be added to the exception list. that way only the ports that it
is
> > actually listening on will be open.
> >
> > there is no ability to map multiple port openings to a single user
defined
> > UI entry.
> > --
> > David
> > Microsoft Windows Networking
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > > Hi,
> > >
> > > I have two question on the windows firewall that comes with sp1 on the
> > > 2003
> > > server.
> > >
> > > Is there any way to add range of TCP or UDP ports in the exceptions of
> > > windows firewall, instead of adding one port at time. As some system
use
> > > random ports between a range.
> > >
> > > And how to add multiple ports under on heading like there is one for
"File
> > > and Printer Sharing" on the exceptions tab.
> > >
> > > Thanks in advance.
> > >
> >
> >
> >
| 
XML Sitemap