VPN Ports

[David Harrison]

I

Topic

[David Harrison]

I

[David Barr]

I think your network guys should filter based on the source IP, destination IP and port and ignore the source port.

I don’t think Cloverleaf will let you pick your source ports.  Another option is to run a proxy server using netcat (or some other port forwarder like datapipe or fpipe) and specifying a source port in the proxy software.

[Mark Perschbacher]

I concurr with David.  The source port usually jumps all over the map.  Filter on the IP address and port you are sending to.

[David Harrison]

I agree also. The ephemeral ports are just that; they are not associated with any server processes or applications and therefore should not be considered a security risk.

[Author]

Replies