port redirection on firewalls

carl_townshend · ‎06-03-2008

Hi all, is there any reason why we would do this ? instead of direct port to port mappings ?

niro · ‎06-03-2008

Maybe for security or some kind of restriction/limitation on an application. i.e map port 80 to 81 for outside so your web site wouldn't be as easily accessible...although a fairly simple scan would still detect it.

Maybe someone else has some better reasons. :)

Rick Morris · ‎06-03-2008

We had to do this based on security based on obscurity.

If we change the port then people will not access it, which is stupid logic. We had changed all common ports on some common applications based on development needs. Instead of actually having a security team who knows what to do.

cisco24x7 · ‎06-03-2008

you do this for several reasons:

1- you have limited public IP addresses. For

example, for home users, you normally have

only 1 public IP address. In order to access

hosts behind the firewall, you have to resort

to port-redirect. Either that or SSL vpn or

IPSec VPN.

2- people just wants to learn it,