The Web Hikers guide to
Outpost Firewall

Agnitum Products

Bottom

There are preset rules for the following Agnitum products:

Agnitum Products Update
Jammer
Tauscan

Glossary Bottom Top

Agnitum Products Update

Protocol: TCP
Direction: Outbound
Remote Port(s): FTP DATA (20), FTP (21), HTTP (80), HTTPS (443), 3128, SOCKS (1080), 8080
Action: Allow It

What it's for

This rule is used by your Outpost when you use the update function. HTTP (Hyper Text Transfer Protocol) is used for browsing the Internet and is the only port you really need. HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer (SSL)) is used when connecting to secure sites. SOCKS is only needed by people using a SOCKS proxy server. 3128 and 8080 are common ports that proxy servers use.

FTP (File Transfer Protocol) is used to connect to FTP servers to download files. FTP uses two channels to achieve the transfer, there is the control connection (FTP) which is used to send the necessary commands to achieve the transfer and a data channel (FTP DATA) which is used to actually send the files with. The control connection is established from the client (which would be you) when the client logs into an ftp server, whereas the data channel is usually established by the server to the client after the client connects to the server.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as www.agnitum.com. If you don't use a SOCKS proxy server remove SOCKS. If you don't use a remote or local proxy remove 3128 and 8080. I have removed FTP and FTP DATA as well and have never had any trouble updating Outpost even though the only port I allow for this rule is HTTP.
More about HTTP, HTTPS, SOCKS, PROXY, FTP, FTP DATA
Back to Agnitum Products

Glossary Bottom Top

Jammer Report

Protocol: TCP
Direction: Outbound
Remote Port(s): SMTP (25)
Action: Allow It

What it's for

I have never used Jammer but SMTP (Simple Mail Transfer Protocol) is used to send e-mails your e-mail providers SMTP server which in turn forwards your mail to it's destinations POP server so that the recipient can then receive the mail. Going by this rules name I guess Jammer creates e-mails to report intrusion attempts?

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as your e-mail providers SMTP server. This is usually smtp.your_provider.com so, for example, if NTLWorld is your e-mail provider you would use smtp.ntlworld.com. You can either e-mail your provider for there SMTP server details or send an e-mail and check either your Allowed log or the DNS Cache log both of which should give you the IP number or host name of your providers SMTP server.
More about SMTP
Back to Agnitum Products

Glossary Bottom Top

Tauscan Update

Protocol: TCP
Direction: Outbound
Remote Port(s): HTTP (80), 3128, SOCKS (1080), 8080
Action: Allow It

What it's for

This rule is used by your Outpost when you use the update function. HTTP (Hyper Text Transfer Protocol) is used for browsing the Internet and is the only port you really need. SOCKS is only needed by people using a SOCKS proxy server. 3128 and 8080 are common ports that proxy servers use.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as www.agnitum.com. If you don't use a SOCKS proxy server remove SOCKS. If you don't use a remote or local proxy remove 3128 and 8080. As with Agnitum Products Update HTTP should be enough for this rule for most people.
More about HTTP, SOCKS, PROXY
Back to Agnitum Products

Glossary Top