Needs some help Concerning firewall programs

[ziohausam]

Hi all

It is my first time here and i am very pleased to find this great forum that strongly gives major support to its members.

Actuallly my problem is little complicated... i know nothing about network and its concepts... and i am now in a situation that i am obliged to test a firewall program. and this will be within couple of days.. so i have downloaded some firewall programs to try to be familiar with it.. and now i face so many questions and options that are considered to be so difficult to me to understand.
i have searched alot about them and i found your great forum by chance... and i am full of hopes that i can find all answers to my problems here

i will mention now some of the options that i want to know what are these... and how exactly i can test them.

1- Allow/block outgoing DNS
2- Allow/block outgoing DHCP
3- incomming UDP Ports

as i have the answers to these 3 options.. i may have some else to ask about

I realy appreciate your help
Thanks

 

[suprasteve]

I'll post the instructions I got for ZoneAlarm below, don't know if that's what you're using but the blocked port numbers should be the same. Anyone with more know-how please post if these are bad in some way:

Zone Alarm Pro advanced port settings

If you're running ZoneAlarm Pro you will probably have considered that most of the "advanced" settings might as well be in Chinese for all the use they are. User friendly they are not!

If you are not on a LAN (connected to another computer in a network) you can use this guide to give your firewall some real muscle and a new lease of life:

Launch ZoneAlarm Pro and click to highlight the "Firewall" tab on the left hand side . In the pane that appears on the right hand side in the section "Internet Zone Security" set the slider control to "High" Then click the "Custom" button in the same section.

The next settings page is divided into two sections with tabs Internet Zone and Trusted Zone at the top of the page. Under the Internet Zone tab there is a list of settings that can be accessed by scrolling. At the top is the high security settings and the only thing that should check from there is "allow broadcast/multicast". The rest should be unchecked.

Scroll down until you get to the medium security settings area. Check all the boxes in this section until you get to "Block Incomming UDP Ports". When you check that you will be asked to supply a list of ports, and in the field at the bottom of the page enter 1-65535

Then go back to the list and check the box alongside "Block Outgoing UDP Ports" and at the bottom of the page enter 1-19, 22-79, 82-7999, 8082-65535

Repeat this proceedure for the following settings
"Block Incomming TCP Ports": 1-65535
"Block Outgoing TCP Ports": 1-19, 22-79, 82-7999, 8082-65535
Then click "Apply", "Ok" at the bottom of the page.

Back in the right hand "Firewall" pane go next to the yellow "Trusted Zone Security" section and set it to "high" with the slider. Click "Custom" and repeat the above proceedure this time choosing the Trusted Zone tab at the top of the settings page.

These settings will stop all incoming packets @ports 1-65535 and also block all pings, trojans etc... this will also stop all spyware or applications from phoning home from your drive without your knowledge!