The Web Hikers guide to
Outpost Firewall

Home > Rules > Preset Rules > Browser

Browser

Bottom

There are preset rules for the following browsers:

GoSURF
Internet Explorer
Mozilla
MyIE Web Browser
Netcaptor
Netscape Navigator
Netscape Mail Notification
Opera
Smart Explorer
Windows Explorer

Default browser rules can be found in the General section.

GoSURF

• GoSURF HTTP connection
• GoSURF HTTPS connection
• GoSURF SOCKS connection
• GoSURF PROXY connection
• GoSURF Gopher connection
• GoSURF Web Folders

GoSURF HTTP connection
Internet Explorer HTTP connection
Mozilla HTTP connection
MyIE Web Browser HTTP connection
NetCaptor HTTP connection
Netscape Navigator HTTP connection
Opera HTTP connection
Smart Explorer HTTP connection
Windows Explorer HTTP connection

Protocol: TCP
Direction: Outbound
Remote Port(s): HTTP (80), 81-83
Action: Allow It

What it's for

This rule is used for browsing web pages. HTTP (Hyper Text Transfer Protocol) is the only port you really need for browsing the Internet, ports 81, 82, 83 are auxiliary web browsing ports and are rarely used.

To optimize

Remove the remote ports: 81, 82, 83 unless you know that you need them.
More about HTTP
Back to Browsers

Glossary Bottom Top

GoSURF HTTPS connection
Internet Explorer HTTPS connection
Mozilla HTTPS connection
MyIE Web Browser HTTPS connection
NetCaptor HTTPS connection
Netscape Navigator HTTPS connection
Smart Explorer HTTPS connection

Protocol: TCP
Direction: Outbound
Remote Port(s): HTTPS (443)
Action: Allow It

What it's for

This rule is used for secure web page connections (Hyper Text Transfer Protocol over Secure Socket Layer (SSL)), HTTPS is used when you visit pages that need a password (such as Hotmail) or online shopping sites. You can tell when ever the page your looking at is secure by looking for the little padlock symbol which will be displayed somewhere in your browser. Unlike HTTP, HTTPS encrypts the data that is sent and received.

Of course, changing the Action from 'Allow It' to 'Deny It' will stop anyone using your browser from accessing secure sites. This would mean that if you didn't want anyone to be able to buy anything you could stop them quite easily without having to put every shopping site you can think of into the Content plugin's blocked sites list.

To optimize

The number of sites you visit that are secure are few and far between so you might like to create rules for each site you visit. Just specify as 'Remote Host' the site that you want, duplicate the rule, but change the 'Remote Host' for any additional site.
More about HTTPS
Back to Browsers

Glossary Bottom Top

GoSURF SOCKS connection
Internet Explorer SOCKS connection
Mozilla SOCKS connection
MyIE Web Browser SOCKS connection
NetCaptor SOCKS connection
Netscape Navigator SOCKS connection
Opera SOCKS connection
Smart Explorer SOCKS connection

Protocol: TCP
Direction: Outbound
Remote Port(s): SOCKS (1080)
Action: Allow It

What it's for

SOCKS is only needed by people using a SOCKS proxy server. Most people don't need this rule. SOCKS is a protocol that allows applications that normally can't use a proxy server to use a proxy server, which is pretty cool! SOCKS is mainly maintained by NEC and there program SocksCap is available for free.

To optimize

If you know that you don't use a SOCKS proxy server you can delete (or turn off) this rule.
More about SOCKS
Back to Browsers

Glossary Bottom Top

GoSURF PROXY connection
Internet Explorer PROXY connection
Mozilla PROXY connection
MyIE Web Browser PROXY connection
NetCaptor PROXY connection
Netscape Navigator PROXY connection
Opera PROXY connection
Smart Explorer PROXY connection

Protocol: TCP
Direction: Outbound
Remote Port(s): 3128, 8080, 8088
Action: Allow It

What it's for

This rule is used by your browser when you have it set to connect to a proxy server. The rule is set to use the three most common ports proxies are usually set to. A proxy server allows more then one computer to connect to the Internet when there is only one Internet connection. So if you had two or more computers on a LAN (Local Area Network - two or more computers that are connected together to form a network, all participants on the LAN also need a cabled Network card) the computer (client) that didn't have access to the Internet could still access the Internet by routing it's connection through the computer (server) that did have Internet access. The clients connections would get sent to a proxy server on the server, the proxy server would then fetch the data requested by the client and pass the information back over the LAN to the client. AnalogX give away a free proxy server, it's the one I use at home to allow my brothers PC connect to the Internet

To optimize

For local proxies (like The Proxomitron) - specify the 'Remote Host' as localhost
For remote proxies (like your ISP's) - specify the 'Remote Host' as the IP of the remote proxy server (you can e-mail your ISP for their proxy server IP).
Remove PROXY ports that you don't use, so if you just use 8080, remove 8088 and 3128.
If you know that you don't use a proxy server you can delete (or turn off) this rule.
More about PROXY
Back to Browsers

Glossary Bottom Top

GoSURF Gopher connection
Internet Explorer Gopher connection
Mozilla Gopher connection
MyIE Web Browser Gopher connection
NetCaptor Gopher connection

Protocol: TCP
Direction: Outbound
Remote Port(s): 70
Action: Allow It

What it's for

This rule is used for accessing Gopher (a play on the words go for) servers. Gopher protocol was very popular before the WWW explosion and it is still supportedd today even though you may not have heard of it. Gopher is used for sharing infromation and files by connecting to Gopher servers (called Gopher Holes), accessing a Gopher server is like accessing a hard disc in that there is a display of files and folders which you can browse through and download. Unlike WWW sites, Gopher sites all look the same so they are very easy to navigate but unlike WWW sites the display is plain text.

To optimize

Remove the this rule if you don't ever access Gopher servers.
Back to Browsers

Glossary Bottom Top

GoSURF Web Folders
Internet Explorer Web Folders
MyIE Web Folders
NetCaptor Web Folders

There are two rules, one for TCP and one for UDP

Protocol: TCP
Direction: Inbound
Remote Port(s): 1375
Action: Allow It

Protocol: UDP
Direction: Inbound
Remote Port(s): 1040-1050
Action: Allow It

What it's for

These rules are used for creating and accessing Web Folders. Web Folders create shortcuts in My Network Places on Windows 2000 and XP (in NT and 98 I think a folder called Web Folders is created in My Computer). Web Folders can be used to display the files and folders on a web server and if you have write access to that server you edit those files and folders (delete, rename etc.). Files and folders viewed in Web Folders also display the Internet address that they are associated with.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as the server you have created a Web Folders link to.
Back to Browsers

Glossary Bottom Top

Internet Explorer FTP connection
Mozilla FTP connection
MyIE Web Browser FTP connection
NetCaptor FTP connection
Netscape Navigator FTP connection
Opera FTP connection
Smart Explorer FTP connection
Windows Explorer FTP connection

Protocol: TCP
Direction: Outbound
Remote Port(s): FTP (21)
Action: Allow It

What it's for

This rule is used for establishing FTP (File Transfer Protocol) connections to FTP servers to download a file (although file transfer can be done over HTTP using the browser's HTTP rule).

FTP uses two channels to achieve the transfer, there is the control connection (this rule) which is used to send the necessary commands to achieve the transfer and a data channel (see FTP DATA) which is used to actually send the files with. The control connection is established from the client (which would be you) when the client logs into an ftp server, whereas the data channel is usually established by the server to the client after the client connects to the server.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as the FTP server you use.
More about FTP
Back to Browsers

Glossary Bottom Top

Internet Explorer FTP DATA connection
Mozilla FTP DATA connection
MyIE Web Browser FTP DATA connection
NetCaptor FTP DATA connection
Netscape Navigator FTP DATA connection
Opera FTP DATA connection
Smart Explorer FTP DATA connection
Windows Explorer FTP DATA connection

Protocol: TCP
Direction: Inbound
Remote Port(s): FTP DATA (20)
Action: Allow It

What it's for

This rule is used for the actual transfer of files from an FTP (File Transfer Protocol) server (although file transfer can be done over HTTP using the browser's HTTP rule).

FTP uses two channels to achieve the transfer, there is the control connection (see FTP) which is used to send the necessary commands to achieve the transfer and a data channel (this rule) which is used to actually send the files with. The control connection is established from the client (which would be you) when the client logs into an ftp server, whereas the data channel is usually established by the server to the client after the client connects to the server.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as the FTP server you use.
More about FTP DATA
Back to Browsers

Glossary Bottom Top

Mozilla Send Mail
Netscape Messenger Send Mail

Protocol: TCP
Direction: Outbound
Remote Port(s): SMTP (25)
Action: Allow It

What it's for

This rule is used whenever your browser sends mail. It uses SMTP (Simple Mail Transfer Protocol) to send the mail to your e-mail providers SMTP server which in turn forwards your mail to it's destinations POP server so that the recipient can then receive the mail.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as your e-mail providers SMTP server. This is usually smtp.your_provider.com so, for example, if NTLWorld is your e-mail provider you would use smtp.ntlworld.com. You can either e-mail your provider for there SMTP server details or send an e-mail and check either your Allowed log or the DNS Cache log both of which should give you the IP number or host name of your e-mail providers SMTP server. If you don't use your browser for collecting e-mail then delete (or turn off) this rule.
More about SMTP
Back to Browsers

Glossary Bottom Top

Mozilla Read Mail
Netscape Messenger Read Mail
Opera NNTP connection

Protocol: TCP
Direction: Outbound
Remote Port(s): NNTP (119)
Action: Allow It

What it's for

This rule is used by your browser for reading newsgroup postings. It uses NNTP (Network News Transfer Protocol).

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as the NNTP server that your news provider uses. As an example, to refine this rule for Steve Gibson's news servers you would use news.grc.com. If you don't use your browser for collecting e-mail then delete (or turn off) this rule.
More about NNTP
Back to Browsers

Glossary Bottom Top

Mozilla Receive Mail
Netscape Messenger Receive Mail

Protocol: TCP
Direction: Outbound
Remote Port(s): POP3 (110)
Action: Allow It

What it's for

This rule is used whenever your browser for receiving mail. It uses POP3 (Version 3 of the Post Office Protocol) to collect mail from your e-mail providers POP server.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as your e-mail providers POP server. This is usually pop or pop3.your_provider.com so, for example, if NTLWorld is your e-mail provider you would use pop.ntlworld.com. You can either e-mail your provider for there POP server details or collect an e-mail and check either your Allowed log or the DNS Cache log both of which should give you the IP number or host name of your e-mail providers POP server. If you don't use your browser for collecting e-mail then delete (or turn off) this rule.
More about POP3
Back to Browsers

Glossary Bottom Top

Mozilla IMAP connection
Netscape Messenger IMAP connection

Protocol: TCP
Direction: Outbound
Remote Port(s): IMAP (143)
Action: Allow It

What it's for

This rule is used by your browser to collect mail IMAP (Internet Message Access Protocol). IMAP is...

“... a method of accessing electronic mail or bulletin board messages that are kept on a (possibly shared) mail server. In other words, it permits a "client" e-mail program to access remote message stores as if they were local. For example, e-mail stored on an IMAP server can be manipulated from a desktop computer at home, a workstation at the office, and a notebook computer while travelling, without the need to transfer messages or files back and forth between these computers.”- The IMAP Connection

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as your IMAP server. If you don't use your browser for collecting e-mail then delete (or turn off) this rule.
More about IMAP
Back to Browsers

Glossary Bottom Top

Netscape Mail Notification

Protocol: TCP
Remote Port(s): POP3 (110)
Action: Allow It

What it's for

This rule is used by Netscape Messenger for checking whether or not you have any new mail. It uses POP3 (Version 3 of the Post Office Protocol) to login to your e-mail providers POP server to see if there are any new e-mails awaiting collection

Netscape's Mail Notification is handled by an application called nsnotify.exe and not the browser netscape.exe so this rule will appear as a separate entry in your list of applications.

To optimize

Add an Event for 'Remote Host' and specify the 'Remote Host' as your e-mail providers POP server. This is usually pop or pop3.your_provider.com so, for example, if NTLWorld is your e-mail provider you would use pop.ntlworld.com. You can either e-mail your provider for there POP server details or collect an e-mail and check either your Allowed log or the DNS Cache log both of which should give you the IP number or host name of your e-mail providers POP server. If you don't use Netscape for collecting e-mail then delete (or turn off) this rule.
More about POP3
Back to Browsers

Glossary Top

Outpost and the Outpost logo are ©Agnitum Software

This is an unofficial guide, the information expressed here may differ from Agnitum's. There is a support forum (no longer run by Agnitum, but by users) if you need more help this is a good place to start. Where information here conflicts with what Agnitum have told you always go with the information given to you by Agnitum.

Guide/site and images ©Stephen Cox