multiple ports in firewall port forwarding

[Guest]

[bangsters]

Hi.

New here.  Just installed EFW and it rocks!!!  Thanks for a wonderful product


Anyway, quick question.  In firewall-> Port forwarding.  How do I enter multiple ports for a specific IP?  I know how to do a range of ports, where I put 123:135 for example.  But what if I want random ports?  Do I have to create individual entries for them (that's how I am doing it for now, unless there's another way.)  Can I add one entry, and add, say, ports 80, 443, 25, 143 in that same entry instead of creating separate rules for each of them.

Please advice.

Thanks

[StephanSch]

You have to create individual entries entries. You can just use several source ips.

[bangsters]

ahh ok.

Thanks

Hey quick question.  In EFW, in DNS settings, if my DNS is behind the EFW firewall and being NATed, should I use th public IP or the private IP?

Thanks

[StephanSch]

In my opinion you should always use the next dns-server.

[bangsters]

uhmm...what did you mean by next-dns server?

[StephanSch]

I think I understood wrong.
Which DNS setting do wou mean?

Could you give a little network diagram?

[bangsters]

right now everything is behind the EFW firewall.  So all purblic IPs are assigned to the EFW server, and are port forwarded to the correct servers in the green network.

However, in the network setup of EFW, i can assign a DNS server for it to resolve addresses.  I am trying to use my DNS servers which are behind this firewall.  So should I put in EFW DNS settings the private IP or the public IP of these dns servers?

[StephanSch]

How is your efw dialing to internet? This dns setting is for the resolving of websites.

[bangsters]

yes, but I want to use my own DNS servers.  Our cabinets are connected directly to the net via network drop, connected to switch.

[bangsters]

bump?  If I want to use my own DNS Servers to resolve the websites, should I put their private IPs or the public IPs in the network setting of Endian?  Currently, how I did it is in Network->Interface->Main Uplink I placed the private IP of DNS1 server in the Primary DNS textbox, then I placed the public IP if DNS1 server into secondary DNS textbox.

Is that correct?

Also, another question which is off topic.  Is it possible to open all ports (RED to GREEN) default then just selct 1 or 2 ports to disable? I want to open all ports except SSH and RDP, It will be outrageous if I have to open each port manually per server per IP....