Opening ports 2000-2003 in Norton firewall

[dbhill]

For video-conferencing I need ports 2000-2003 open. In Norton Personal Firewall it is easy enough to "allow" a specific IP#, but not so obvious to open specific ports. I need to be educated on this.

~Dennis

[at_sym]

Hey Dennis--

Click Personal Firewall > Preferences and check Enable more control over services . This adds a row of buttons under the "Protect these Internet Services" pane. Click New and enter the port numbers you want to open in the Service Port field.

Good luck!

[dbhill]

Ah ha! Found it: thanks. Now the obvious next question is what kind of vulmerability to mischief does this leave me in to have these ports open?

~Dennis

[at_sym]

Well, pretty much any open port can be misused. If you're really worried about it, you can only open the ports when you're actively using them.

As to what exploits use these ports, G-Lock (http://www.glocksoft.com/trojan_port.htm) lists these trojans:

2000 Der Späher / Der Spaeher, Insane Network, Last 2000, Remote Explorer 2000, Senna Spy Trojan Generator
2001 Der Späher / Der Spaeher, Trojan Cow

They're all Windows only, if that makes you feel better. ;)

[dbhill]

Gee, you had me worried there for a second. Ahh, it's great having a Mac. To narrow down the port access some I'm trying to get the actual IP#s of the video servers, so that any intrusive traffic will be filtered out when I get those IPs set in the firewall preferences. Thanks again for your assist.

~Dennis