I just installed a firewall on our first machine (209.190.24.XX).

The first reason why I'm doing this is because I'm going to have a reverse proxy on TeamSpeak, meaning there will be two servers running- TeamSpeak and a reverse proxy, you will connect to the reverse proxy which will filter and watch the connection.  TeamSpeak will be running on a different port that needs to be blocked otherwise the reverse proxy could be bypassed.

The second is that there are a few ports and IPs I've been wanting to block for awhile, there was no way for me to block IPs from the entire machine (there are some frequent people who try to hack into the box).

The only reason why I didn't put a firewall up before was that it would make it more complicated to add new servers (i.e. you would have to allow every port).  I didn't feel good about people playing with the firewall's settings, messing up, and then blocking the whole machine from the Internet.

I'm blocking Radmin and Terminal services (Remote Desktop, RDP) access for all IPs except 209.190.24.38 to prevent the few people who try to brute force the password since .34 is our main facing IP.  It wont block the people who think a little bit but the less area someone can attack on the better.  If the hosting company needs access to 209.190.24.34 for RDP let me know.

I'm leaving open a few ports for TeamSpeak and the game servers so you can have room to add new servers without worrying about fooling with the firewall.  If you really need to add ports yourself try to open up the firewall administrator (icon on the desktop) from RDP- Radmin tends to do weird things with the cursor and I don't want people accidently clicking &quot;block all traffic&quot;.

I'll be doing this to the other machine as well.

If there's any problems let me know...

[code:1:a38617ddc7]
Inbound allow rules&#58;
	Radmin &#40;LOGGED&#41;&#58;
		4899 on 209.190.24.38

	Terminal services &#40;LOGGED&#41;&#58;
		3389 on 209.190.24.38

	Mail &#40;Merak&#41;&#58;
		25  - SMTP
		366 - SMTP &#40;duplicate&#41;
		465 - SMTPS
		110 - POP3
		143 - IMAP
		993 - IMAPS
		995 - POP3S
		32000 - Admin HTTP
		32001 - Admin HTTPS
	
	TeamSpeak&#58;
		8767 - dFb
		1337 - MIRT
		8727 - LW
		8712 - g2g
		8737 - Pure
		8747 - OSF
		8757 - DEA
		8787 - DoC
		8777 - Some teamspeak server
		9777 - Test TeamSpeak
		19777 - Test TeamSpeak
		60413 - TCP query
		51234 - TCP Query
		62614 - Web admin

		Open&#58; 8707, 8797, 8712, 8721, 8700, 8776, 8752, 8791, 8736, 8751
	
	UCC&#58;
		7777 - DFB UT99 and UT04, OSF, MIRT UT04, LW UT99
		7778 - Gamespy query for 7777
		7787 - Unreal2 query for 7777
		8877 - NSK
		8878 - Gamespy query for 8877
		8887 - Unreal2 query for 8877
		7788 - OSF2, LW UT04
		7789 - Gamespy query for 7788
		7798 - Unreal2 query for 7788
		6789 - Test
		6790 - Gamespy query for 6789
		6799 - Unreal2 query for 6789

		Open &#40;game port&#41;&#58; 7887, 7766, 7755, 7799, 7744, 7711, 7722, 2277, 4477, 9977

	UCC Web admin&#58;
		1802 - UT99 DEA
		1885 - UT99 demo_server
		8884 - UT99 dfb_server
		1885 - UT99 emac_server
		1891 - UT99 lwsnipers
		1892 - UT99 lwsnipers2
		1801 - UT99 OSF
		80   - UT2004 demo-server
		8080 - UT2004 dfb-server, UT2004 MIRT, UT2004 mirt-jb-server
		8888 - UT2004 lwsnipers
		8090 - UT2004 nsk-server
		
		Open&#58; 8070, 8071, 8072, 8073, 8074, 8075, 8076, 8077, 8079, 8081


	Battlefield 2&#58;
		16567 - G2G Clan Base
		29900 - G2G query
		55123 - G2G VOIP BF Client
		55124 - G2G VOIP BF Server
		55125 - G2G VOIP Server

		Open &#40;across all&#41;&#58; 16566, 16568, 16569, 16570, 16571, 16572, 16573, 16574, 16575, 16576
				   29901, 29902, 29903, 29904, 29905, 29906, 29907, 29908, 29909, 29910
				   55136, 55140, 55143, 55146, 55150, 55153, 55156, 55160, 55163, 55166
				   55137, 55141, 55144, 55147, 55151, 55154, 55157, 55161, 55164, 55167
				   55138, 55142, 55145, 55148, 55152, 55155, 55158, 55162, 55165, 55168
	
	
	FTP&#58;
		65505-65532 - Passive FTP ports
		21 - Main FTP Port
	
	MySQL Replication&#58;
		3306 from 209.51.200.250
	
	IIS&#58;
		9080 - IIS Redirects and Downloads
	
	Apache &#40;HTTP&#41;&#58;
		80 - Main HTTP port
	
	Shoutcast&#58;
		8000
		8001

	DNS Query &#40;UDP&#41; and DNS Zone Transfer &#40;TCP&#41;&#58;
		53

Outbound Allow Rules&#58;
	All outgoing connections are logged.

	UCC&#58;
	 - Same as above &#40;used for outside querying&#41;

	TeamSpeak&#58;
	 - Same as above &#40;used for outside querying&#41;

	Battlefield 2&#58;
	 - Same as above &#40;used for outside querying&#41;

	UCC Master&#58;
		27900
		28902

	MySQL Replication&#58;
		3306 to 209.51.200.250
	
	WWWPMan&#58;
		1601 to 209.51.200.250

	FTP&#58;
		20 - Active FTP
	
	Other&#58;
		80 - HTTP Connections
		21 - FTP Connections
		53 - DNS connections
		25 - Mail Connections &#40;phpnuke registration/message e-mails&#41;

Other Allow Rules&#58;
	- All ARP packets
	- All ICMP ping packets
	- All ICMP traceroute packets
	- All ICMP destination unreachable packets
[/code:1:a38617ddc7]