Outbound port Question

I have MN-700 and am wanting to set time limits that the
kids can access the internet. I do Identify the outbound
ports that programs are using? Like AIM. IE uses 80?
All I am trying to do is shut down the internet from
midnight to 6am?

I'd suggest setting it to ports 1-65535 once for UDP & again for TCP.
That will kick them off the Internet for sure. The problem is that many
programs can be configured to use odd port numbers & thus the only way
to work around that is to block the entire Internet.

bigntall wrote:

> I have MN-700 and am wanting to set time limits that the
> kids can access the internet. I do Identify the outbound
> ports that programs are using? Like AIM. IE uses 80?
> All I am trying to do is shut down the internet from
> midnight to 6am?

Ie can actually use several different ports because HTTPS defaults to
port 8080. Also you can run a web server on a strange port number like
65535 all you would have to do it http://servername:65535 so IE can
theoretically use any port depending on the web server &/or what kind of
server it is connecting to. So once again I strongly recommend blocking
ports 1-65535 for both UDP & TCP as this will only effect the internet
as that is all client filtering will filter because it is only concerned
with traffic that leaves the switch or wireless connection.

bigntall wrote:

> I have MN-700 and am wanting to set time limits that the
> kids can access the internet. I do Identify the outbound
> ports that programs are using? Like AIM. IE uses 80?
> All I am trying to do is shut down the internet from
> midnight to 6am?

https uses port TCP 443 - it has nothing to do with 8080.


"joker" <no-(E-Mail Removed)> wrote in message
news:%23$(E-Mail Removed)...
> Ie can actually use several different ports because HTTPS defaults to
> port 8080. Also you can run a web server on a strange port number like
> 65535 all you would have to do it http://servername:65535 so IE can
> theoretically use any port depending on the web server &/or what kind of
> server it is connecting to. So once again I strongly recommend blocking
> ports 1-65535 for both UDP & TCP as this will only effect the internet
> as that is all client filtering will filter because it is only concerned
> with traffic that leaves the switch or wireless connection.
>
> bigntall wrote:
>
> > I have MN-700 and am wanting to set time limits that the
> > kids can access the internet. I do Identify the outbound
> > ports that programs are using? Like AIM. IE uses 80?
> > All I am trying to do is shut down the internet from
> > midnight to 6am?
>

I guess I was wrong.

I had always been told it used 8080 for HTTPS.

It doesn't really matter.

The most important thing is that the web server can use any port that it
wants to use.

That is why you need to disable all Internet connection ports.

Kerry Liles wrote:

> https uses port TCP 443 - it has nothing to do with 8080.
>
>
> "joker" <no-(E-Mail Removed)> wrote in message
> news:%23$(E-Mail Removed)...
>
>>Ie can actually use several different ports because HTTPS defaults to
>>port 8080. Also you can run a web server on a strange port number like
>>65535 all you would have to do it http://servername:65535 so IE can
>>theoretically use any port depending on the web server &/or what kind of
>>server it is connecting to. So once again I strongly recommend blocking
>>ports 1-65535 for both UDP & TCP as this will only effect the internet
>>as that is all client filtering will filter because it is only concerned
>>with traffic that leaves the switch or wireless connection.
>>
>>bigntall wrote:
>>
>>
>>>I have MN-700 and am wanting to set time limits that the
>>>kids can access the internet. I do Identify the outbound
>>>ports that programs are using? Like AIM. IE uses 80?
>>>All I am trying to do is shut down the internet from
>>>midnight to 6am?
>>
>
>

"joker" <no-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I guess I was wrong.
>
> I had always been told it used 8080 for HTTPS.
>
> It doesn't really matter.
>
> The most important thing is that the web server can use any port that it
> wants to use.
>
> That is why you need to disable all Internet connection ports.
>

Absolutely no problem; I agree with your point about closing all the ports,
although I did not see the original post that prompted this whole
discussion...

Oh, I went back and found the post... I guess blocking 1-65555 would
effectively disable the internet, it would be nice if hardware firewalls had
a 'block all wan traffic' option (and if such options could be triggered
from the Lan side using a command line like URL). I use my MN700 as an
access point and frankly have never seen the options it has in router mode.

cheers