firewalls and webservers request for comments

[Brian Densmore]

Well, actually I already have iptables running.
I have only the ports open that need to be open
and only running the services that are needed.
I was really looking for what people thought about
firewalls protecting webservers and such. I mean
not just iptables but the whole ball of wax, the 
tools for monitoring, etc.

Ports I use:

SMTP 25
WWW ports 80 and 443
IMAPS port 993
and the SSH ports


> -----Original Message-----
> From: Frank Wiles
> 
> On Thu, 7 Oct 2004 17:05:45 -0500
> "aaron hirsch"
> 
> > Why tell anyone here are the ports you will need to have 
> open when all
> > ...
> > http/https. Why open the door further than it needs to be?  
> 
>   I wasn't trying to give him advice on how to run his E-mail setup. 
> 
>   The listing of the ports was just an example to help illustrate why
>   running a firewall in front of an E-mail server is typically
>   pointless.
> 
>   I apologize if that wasn't clear.