open ports for a website

Check Point community forum

February 07, 2012, 10:26:55 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News:

Home

Forum

Help

User

Welcome, Guest. Please login or register.
Did you miss your activation email?
February 07, 2012, 10:26:55 PM

Articles

[Nokia] User ends up in clish immediately after login by juve
Put your company logo on Integrity interface by juve
ftp : Active command received while working in Passive mode by juve
How to enable the VPN accelerator on Nokia by juve
Routes not surviving a reboot on SecurePlatform by juve

Check Point community forum > Forum > Perimeter security > Firewall-1 > open ports for a website

Poll

Question:

Ho to do this

reply	0 (0%)
mail	0 (0%)

Total Voters: 0

Pages: [1]

« previous next »

Author

Topic: open ports for a website (Read 937 times)

renuka

Newbie

Posts: 1

open ports for a website

« on: November 25, 2009, 07:35:42 AM »

I am completely new to checkpoint firewall..I need to open a port for access to a website...I searched on google using phrase "open ports for a website" but didnt find anything helpful...
A port 5010 for a website which is outside our network need to be opened on checkpoint firewall, so that users from internal network should be able to access the website. the website is "http://rns-pnr.gpg.com:5010/doSPOLogin.do"
Please help me with the steps to go about doing this..

Thanks


	Logged

juve

Administrator
Jr. Member

Posts: 92

Re: open ports for a website

« Reply #1 on: November 25, 2009, 04:27:08 PM »

You need to create an access rule with the following :

source -> users that need access
destination : ip address of the site
service : tcp service with port 5010
action : accept

add logging too.

Depending on your setup you need to create an additional nat rule :

source -> users that need access
destination : ip address of the site
service : tcp service with port 5010
translated source -> hide behind firewall external IP
translated destination -> original
translated service -> original

I can't resolve the site you mentioned apparently, but the main ip of gpg.com is 209.1.163.87, so probably that is the one to open.

In case you use a proxy to surf, you need to open up port 5010 for the proxy to go to the outside and configure the proxy to accept 5010 next to 443 and 80.