Как настроить D-Link Firewall

[lexar]

Подскажите чайнику.
Есть у меня D-Link 704 Up.
хочется настроить его файрволл.

Задача такая.
1) Три компа в локальной сети в одной рабочей группе,
не должно быть ни каких ограничений по зашариванию
чего угодно под Windows

2) Никаких ходов снаружи во внутрь: типа удаленных десктопов и тп
Никто снаружи это менеджировать не собирается

3) Внутри никаких серверов для доступа снаружи не предполагается.

4) Разрешены только стандартные выходы наружу:
http, ftp, pop3, smpt, imap, sntp, icmp (ничего не забыл?)
Типа, чтоб никакой случайно привнесеный спай-плагин по левым портам
голову не морочил.

Кто-то может набрасать правила "на вскидку", хотя бы приблизительно?

[-=MasTer=-]

Не знаю на сколько это правильно, но я бы сделал так. Из сетки в инет разрешил все порты, а на каждом компе в сети лучше поставить что-то типа Kerio Personal Firewall. Потому как будешь потом голову морочить почему у кого-то не работает IRC,ICQ,онлайн игры и тому подобное. Придется каждый раз прописывать порты. Но такой подхом менее безопасен. Все ложится на плечи юзеров в сети
Если так не устраивает - собери инфу в сети, кто чем пользуется и какие порты им необходимо открыть.

[lexar]

Это понятно,
а хорошие ссылки кто-то подсказать может?
что бы там была таблица с номерами портов для ходового софта и протоколов,
и коментарии по D-Link или что-то аналогичное.
На сам сайт D-Link я ходил, но там мало информации.

[-=MasTer=-]

Здесь можно найти много интересного: http://forum.dlink.ru/

[-=MasTer=-]

А так навскидку:
<Сервис><Протокол><Порт>
Ping ICPM Any
POP3 TCP 110
SMTP TCP 25
WinMessenger TCP/UDP 1863,7001
ICQ TCP 5190
IRC TCP 6666-6668
HTTP TCP 80
HTTPS TCP 443
HTTPProxy TCP 3128
FTP TCP 20,21
eDonkey TCP/UDP 4661-4665
DNS TCP/UDP 53

[demonas]

# WELL KNOWN PORT NUMBERS
#
rtmp 1/ddp #Routing Table Maintenance Protocol
tcpmux 1/tcp #TCP Port Service Multiplexer
tcpmux 1/udp #TCP Port Service Multiplexer
nbp 2/ddp #Name Binding Protocol
compressnet 2/tcp #Management Utility
compressnet 2/udp #Management Utility
compressnet 3/tcp #Compression Process
compressnet 3/udp #Compression Process
echo 4/ddp #AppleTalk Echo Protocol
rje 5/tcp #Remote Job Entry
rje 5/udp #Remote Job Entry
zip 6/ddp #Zone Information Protocol
echo 7/tcp
echo 7/udp
discard 9/tcp sink null
discard 9/udp sink null
systat 11/tcp users #Active Users
systat 11/udp users #Active Users
daytime 13/tcp
daytime 13/udp
qotd 17/tcp quote #Quote of the Day
qotd 17/udp quote #Quote of the Day
msp 18/tcp #Message Send Protocol
msp 18/udp #Message Send Protocol
chargen 19/tcp ttytst source #Character Generator
chargen 19/udp ttytst source #Character Generator
ftp-data 20/tcp #File Transfer [Default Data]
ftp-data 20/udp #File Transfer [Default Data]
ftp 21/tcp #File Transfer [Control]
ftp 21/udp #File Transfer [Control]
ssh 22/tcp #Secure Shell Login
ssh 22/udp #Secure Shell Login
telnet 23/tcp
telnet 23/udp
# 24/tcp any private mail system
# 24/udp any private mail system
smtp 25/tcp mail #Simple Mail Transfer
smtp 25/udp mail #Simple Mail Transfer
nsw-fe 27/tcp #NSW User System FE
nsw-fe 27/udp #NSW User System FE
msg-icp 29/tcp #MSG ICP
msg-icp 29/udp #MSG ICP
msg-auth 31/tcp #MSG Authentication
msg-auth 31/udp #MSG Authentication
dsp 33/tcp #Display Support Protocol
dsp 33/udp #Display Support Protocol
# 35/tcp any private printer server
# 35/udp any private printer server
time 37/tcp timserver
time 37/udp timserver
rap 38/tcp #Route Access Protocol
rap 38/udp #Route Access Protocol
rlp 39/tcp resource #Resource Location Protocol
rlp 39/udp resource #Resource Location Protocol
graphics 41/tcp
graphics 41/udp
nameserver 42/tcp name #Host Name Server
nameserver 42/udp name #Host Name Server
nicname 43/tcp whois
nicname 43/udp whois
mpm-flags 44/tcp #MPM FLAGS Protocol
mpm-flags 44/udp #MPM FLAGS Protocol
mpm 45/tcp #Message Processing Module [recv]
mpm 45/udp #Message Processing Module [recv]
mpm-snd 46/tcp #MPM [default send]
mpm-snd 46/udp #MPM [default send]
ni-ftp 47/tcp #NI FTP
ni-ftp 47/udp #NI FTP
auditd 48/tcp #Digital Audit Daemon
auditd 48/udp #Digital Audit Daemon
tacacs 49/tcp #Login Host Protocol (TACACS)
tacacs 49/udp #Login Host Protocol (TACACS)
re-mail-ck 50/tcp #Remote Mail Checking Protocol
re-mail-ck 50/udp #Remote Mail Checking Protocol
la-maint 51/tcp #IMP Logical Address Maintenance
la-maint 51/udp #IMP Logical Address Maintenance
xns-time 52/tcp #XNS Time Protocol
xns-time 52/udp #XNS Time Protocol
domain 53/tcp #Domain Name Server
domain 53/udp #Domain Name Server
xns-ch 54/tcp #XNS Clearinghouse
xns-ch 54/udp #XNS Clearinghouse
isi-gl 55/tcp #ISI Graphics Language
isi-gl 55/udp #ISI Graphics Language
xns-auth 56/tcp #XNS Authentication
xns-auth 56/udp #XNS Authentication
mtp 57/tcp # deprecated
#PROBLEMS!======================================== ======================
# 57/tcp any private terminal access
#PROBLEMS!======================================== ======================
# 57/udp any private terminal access
xns-mail 58/tcp #XNS Mail
xns-mail 58/udp #XNS Mail
# 59/tcp any private file service
# 59/udp any private file service
ni-mail 61/tcp #NI MAIL
ni-mail 61/udp #NI MAIL
acas 62/tcp #ACA Services
acas 62/udp #ACA Services
whois++ 63/tcp
whois++ 63/udp
covia 64/tcp #Communications Integrator (CI)
covia 64/udp #Communications Integrator (CI)
tacacs-ds 65/tcp #TACACS-Database Service
tacacs-ds 65/udp #TACACS-Database Service
sql*net 66/tcp #Oracle SQL*NET
sql*net 66/udp #Oracle SQL*NET
bootps 67/tcp dhcps #Bootstrap Protocol Server
bootps 67/udp dhcps #Bootstrap Protocol Server
bootpc 68/tcp dhcpc #Bootstrap Protocol Client
bootpc 68/udp dhcpc #Bootstrap Protocol Client
tftp 69/tcp #Trivial File Transfer
tftp 69/udp #Trivial File Transfer
gopher 70/tcp
gopher 70/udp
netrjs-1 71/tcp #Remote Job Service
netrjs-1 71/udp #Remote Job Service
netrjs-2 72/tcp #Remote Job Service
netrjs-2 72/udp #Remote Job Service
netrjs-3 73/tcp #Remote Job Service
netrjs-3 73/udp #Remote Job Service
netrjs-4 74/tcp #Remote Job Service
netrjs-4 74/udp #Remote Job Service
# 75/tcp any private dial out service
# 75/udp any private dial out service
deos 76/tcp #Distributed External Object Store
deos 76/udp #Distributed External Object Store
netrjs 77/tcp
#PROBLEMS!======================================== ======================
# 77/tcp any private RJE service
#PROBLEMS!======================================== ======================
# 77/udp any private RJE service
vettcp 78/tcp
vettcp 78/udp
finger 79/tcp
finger 79/udp
http 80/tcp www www-http #World Wide Web HTTP
http 80/udp www www-http #World Wide Web HTTP
hosts2-ns 81/tcp #HOSTS2 Name Server
hosts2-ns 81/udp #HOSTS2 Name Server
xfer 82/tcp #XFER Utility
xfer 82/udp #XFER Utility
mit-ml-dev 83/tcp #MIT ML Device
mit-ml-dev 83/udp #MIT ML Device
ctf 84/tcp #Common Trace Facility
ctf 84/udp #Common Trace Facility
mit-ml-dev 85/tcp #MIT ML Device
mit-ml-dev 85/udp #MIT ML Device
mfcobol 86/tcp #Micro Focus Cobol
mfcobol 86/udp #Micro Focus Cobol
ttylink 87/tcp
#PROBLEMS!======================================== ===================
# 87/tcp any private terminal link
#PROBLEMS!======================================== ===================
# 87/udp any private terminal link
kerberos-sec 88/tcp kerberos # krb5 # Kerberos (v5)
kerberos-sec 88/udp kerberos # krb5 # Kerberos (v5)
su-mit-tg 89/tcp #SU/MIT Telnet Gateway
su-mit-tg 89/udp #SU/MIT Telnet Gateway
dnsix 90/tcp #DNSIX Securit Attribute Token Map
dnsix 90/udp #DNSIX Securit Attribute Token Map
mit-dov 91/tcp #MIT Dover Spooler
mit-dov 91/udp #MIT Dover Spooler
npp 92/tcp #Network Printing Protocol
npp 92/udp #Network Printing Protocol
dcp 93/tcp #Device Control Protocol
dcp 93/udp #Device Control Protocol
objcall 94/tcp #Tivoli Object Dispatcher
objcall 94/udp #Tivoli Object Dispatcher
supdup 95/tcp
supdup 95/udp
dixie 96/tcp #DIXIE Protocol Specification
dixie 96/udp #DIXIE Protocol Specification
swift-rvf 97/tcp #Swift Remote Virtural File Protocol
swift-rvf 97/udp #Swift Remote Virtural File Protocol
tacnews 98/tcp #TAC News, Unofficial: Red Hat linuxconf
tacnews 98/udp #TAC News, Unofficial: Red Hat linuxconf
metagram 99/tcp #Metagram Relay
metagram 99/udp #Metagram Relay
newacct 100/tcp #[unauthorized use]
hostname 101/tcp hostnames #NIC Host Name Server
hostname 101/udp hostnames #NIC Host Name Server
iso-tsap 102/tcp tsap #ISO-TSAP Class 0
iso-tsap 102/udp tsap #ISO-TSAP Class 0
gppitnp 103/tcp #Genesis Point-to-Point Trans Net
gppitnp 103/udp #Genesis Point-to-Point Trans Net
acr-nema 104/tcp #ACR-NEMA Digital Imag. & Comm. 300
acr-nema 104/udp #ACR-NEMA Digital Imag. & Comm. 300
csnet-ns 105/tcp cso-ns cso #Mailbox Name Nameserver
csnet-ns 105/udp cso-ns cso #Mailbox Name Nameserver
pop3pw 106/tcp 3com-tsmux #Eudora compatible PW changer
3com-tsmux 106/udp
rtelnet 107/tcp #Remote Telnet Service
rtelnet 107/udp #Remote Telnet Service
snagas 108/tcp #SNA Gateway Access Server
snagas 108/udp #SNA Gateway Access Server
pop2 109/tcp postoffice #Post Office Protocol - Version 2
pop2 109/udp postoffice #Post Office Protocol - Version 2
pop3 110/tcp #Post Office Protocol - Version 3
pop3 110/udp #Post Office Protocol - Version 3
sunrpc 111/tcp rpcbind #SUN Remote Procedure Call
sunrpc 111/udp rpcbind #SUN Remote Procedure Call
mcidas 112/tcp #McIDAS Data Transmission Protocol
mcidas 112/udp #McIDAS Data Transmission Protocol
auth 113/tcp ident tap #Authentication Service
auth 113/udp ident tap #Authentication Service
audionews 114/tcp #Audio News Multicast
раз!

[demonas]

Два!
audionews 114/udp #Audio News Multicast
sftp 115/tcp #Simple File Transfer Protocol
sftp 115/udp #Simple File Transfer Protocol
ansanotify 116/tcp #ANSA REX Notify
ansanotify 116/udp #ANSA REX Notify
uucp-path 117/tcp #UUCP Path Service
uucp-path 117/udp #UUCP Path Service
sqlserv 118/tcp #SQL Services
sqlserv 118/udp #SQL Services
nntp 119/tcp usenet #Network News Transfer Protocol
nntp 119/udp usenet #Network News Transfer Protocol
cfdptkt 120/tcp
cfdptkt 120/udp
erpc 121/tcp #Encore Expedited Remote Pro.Call
erpc 121/udp #Encore Expedited Remote Pro.Call
smakynet 122/tcp
smakynet 122/udp
ntp 123/tcp #Network Time Protocol
ntp 123/udp #Network Time Protocol
ansatrader 124/tcp #ANSA REX Trader
ansatrader 124/udp #ANSA REX Trader
locus-map 125/tcp #Locus PC-Interface Net Map Ser
locus-map 125/udp #Locus PC-Interface Net Map Ser
unitary 126/tcp #Unisys Unitary Login
unitary 126/udp #Unisys Unitary Login
locus-con 127/tcp #Locus PC-Interface Conn Server
locus-con 127/udp #Locus PC-Interface Conn Server
gss-xlicen 128/tcp #GSS X License Verification
gss-xlicen 128/udp #GSS X License Verification
pwdgen 129/tcp #Password Generator Protocol
pwdgen 129/udp #Password Generator Protocol
cisco-fna 130/tcp #cisco FNATIVE
cisco-fna 130/udp #cisco FNATIVE
cisco-tna 131/tcp #cisco TNATIVE
cisco-tna 131/udp #cisco TNATIVE
cisco-sys 132/tcp #cisco SYSMAINT
cisco-sys 132/udp #cisco SYSMAINT
statsrv 133/tcp #Statistics Service
statsrv 133/udp #Statistics Service
ingres-net 134/tcp #INGRES-NET Service
ingres-net 134/udp #INGRES-NET Service
loc-srv 135/tcp epmap #Location Service
loc-srv 135/udp epmap #Location Service
profile 136/tcp #PROFILE Naming System
profile 136/udp #PROFILE Naming System
netbios-ns 137/tcp #NETBIOS Name Service
netbios-ns 137/udp #NETBIOS Name Service
netbios-dgm 138/tcp #NETBIOS Datagram Service
netbios-dgm 138/udp #NETBIOS Datagram Service
netbios-ssn 139/tcp #NETBIOS Session Service
netbios-ssn 139/udp #NETBIOS Session Service
emfis-data 140/tcp #EMFIS Data Service
emfis-data 140/udp #EMFIS Data Service
emfis-cntl 141/tcp #EMFIS Control Service
emfis-cntl 141/udp #EMFIS Control Service
bl-idm 142/tcp #Britton-Lee IDM
bl-idm 142/udp #Britton-Lee IDM
imap 143/tcp imap2 imap4 #Interim Mail Access Protocol v2
imap 143/udp imap2 imap4 #Interim Mail Access Protocol v2
NeWS 144/tcp # Window System
NeWS 144/udp # Window System
#PROBLEMS!======================================== ======================
#uma 144/tcp #Universal Management Architecture
#uma 144/udp #Universal Management Architecture
#PROBLEMS!======================================== ======================
uaac 145/tcp #UAAC Protocol
uaac 145/udp #UAAC Protocol
iso-tp0 146/tcp
iso-tp0 146/udp
iso-ip 147/tcp
iso-ip 147/udp
cronus 148/tcp jargon #CRONUS-SUPPORT
cronus 148/udp jargon #CRONUS-SUPPORT
aed-512 149/tcp #AED 512 Emulation Service
aed-512 149/udp #AED 512 Emulation Service
sql-net 150/tcp
sql-net 150/udp
hems 151/tcp
hems 151/udp
bftp 152/tcp #Background File Transfer Program
bftp 152/udp #Background File Transfer Program
sgmp 153/tcp
sgmp 153/udp
netsc-prod 154/tcp
netsc-prod 154/udp
netsc-dev 155/tcp
netsc-dev 155/udp
sqlsrv 156/tcp #SQL Service
sqlsrv 156/udp #SQL Service
knet-cmp 157/tcp #KNET/VM Command/Message Protocol
knet-cmp 157/udp #KNET/VM Command/Message Protocol
pcmail-srv 158/tcp #PCMail Server
pcmail-srv 158/udp #PCMail Server
nss-routing 159/tcp
nss-routing 159/udp
sgmp-traps 160/tcp
sgmp-traps 160/udp
snmp 161/tcp
snmp 161/udp
snmptrap 162/tcp snmp-trap
snmptrap 162/udp snmp-trap
cmip-man 163/tcp #CMIP/TCP Manager
cmip-man 163/udp #CMIP/TCP Manager
cmip-agent 164/tcp #CMIP/TCP Agent
smip-agent 164/udp #CMIP/TCP Agent
xns-courier 165/tcp #Xerox
xns-courier 165/udp #Xerox
s-net 166/tcp #Sirius Systems
s-net 166/udp #Sirius Systems
namp 167/tcp
namp 167/udp
rsvd 168/tcp
rsvd 168/udp
send 169/tcp
send 169/udp
print-srv 170/tcp #Network PostScript
print-srv 170/udp #Network PostScript
multiplex 171/tcp #Network Innovations Multiplex
multiplex 171/udp #Network Innovations Multiplex
cl/1 172/tcp #Network Innovations CL/1
cl/1 172/udp #Network Innovations CL/1
xyplex-mux 173/tcp
xyplex-mux 173/udp
mailq 174/tcp
mailq 174/udp
vmnet 175/tcp
vmnet 175/udp
genrad-mux 176/tcp
genrad-mux 176/udp
xdmcp 177/tcp #X Display Manager Control Protocol
xdmcp 177/udp #X Display Manager Control Protocol
NextStep 178/tcp nextstep NeXTStep #NextStep Window Server
NextStep 178/udp nextstep NeXTStep #NextStep Window Server
bgp 179/tcp #Border Gateway Protocol
bgp 179/udp #Border Gateway Protocol
ris 180/tcp #Intergraph
ris 180/udp #Intergraph
unify 181/tcp
unify 181/udp
audit 182/tcp #Unisys Audit SITP
audit 182/udp #Unisys Audit SITP
ocbinder 183/tcp
ocbinder 183/udp
ocserver 184/tcp
ocserver 184/udp
remote-kis 185/tcp
remote-kis 185/udp
kis 186/tcp #KIS Protocol
kis 186/udp #KIS Protocol
aci 187/tcp #Application Communication Interface
aci 187/udp #Application Communication Interface
mumps 188/tcp #Plus Five's MUMPS
mumps 188/udp #Plus Five's MUMPS
qft 189/tcp #Queued File Transport
qft 189/udp #Queued File Transport
gacp 190/tcp #Gateway Access Control Protocol
gacp 190/udp cacp #Gateway Access Control Protocol
prospero 191/tcp #Prospero Directory Service
prospero 191/udp #Prospero Directory Service
osu-nms 192/tcp #OSU Network Monitoring System
osu-nms 192/udp #OSU Network Monitoring System
srmp 193/tcp #Spider Remote Monitoring Protocol
srmp 193/udp #Spider Remote Monitoring Protocol
irc 194/tcp #Internet Relay Chat Protocol
irc 194/udp #Internet Relay Chat Protocol
dn6-nlm-aud 195/tcp #DNSIX Network Level Module Audit
dn6-nlm-aud 195/udp #DNSIX Network Level Module Audit
dn6-smm-red 196/tcp #DNSIX Session Mgt Module Audit Redir
dn6-smm-red 196/udp #DNSIX Session Mgt Module Audit Redir
dls 197/tcp #Directory Location Service
dls 197/udp #Directory Location Service
dls-mon 198/tcp #Directory Location Service Monitor
dls-mon 198/udp #Directory Location Service Monitor
smux 199/tcp
smux 199/udp
src 200/tcp #IBM System Resource Controller
src 200/udp #IBM System Resource Controller
at-rtmp 201/tcp #AppleTalk Routing Maintenance
at-rtmp 201/udp #AppleTalk Routing Maintenance
at-nbp 202/tcp #AppleTalk Name Binding
at-nbp 202/udp #AppleTalk Name Binding
at-3 203/tcp #AppleTalk Unused
at-3 203/udp #AppleTalk Unused
at-echo 204/tcp #AppleTalk Echo
at-echo 204/udp #AppleTalk Echo
at-5 205/tcp #AppleTalk Unused
at-5 205/udp #AppleTalk Unused
at-zis 206/tcp #AppleTalk Zone Information
at-zis 206/udp #AppleTalk Zone Information
at-7 207/tcp #AppleTalk Unused
at-7 207/udp #AppleTalk Unused
at-8 208/tcp #AppleTalk Unused
at-8 208/udp #AppleTalk Unused
qmtp 209/tcp #The Quick Mail Transfer Protocol
qmtp 209/udp #The Quick Mail Transfer Protocol
#PROBLEMS!======================================== ======================
#tam 209/tcp #Trivial Authenticated Mail Protocol
#tam 209/udp #Trivial Authenticated Mail Protocol
#PROBLEMS!======================================== ======================
z39.50 210/tcp wais #ANSI Z39.50
z39.50 210/udp wais #ANSI Z39.50
914c/g 211/tcp #Texas Instruments 914C/G Terminal
914c/g 211/udp #Texas Instruments 914C/G Terminal
anet 212/tcp #ATEXSSTR
anet 212/udp #ATEXSSTR
ipx 213/tcp
ipx 213/udp
vmpwscs 214/tcp
vmpwscs 214/udp
softpc 215/tcp #Insignia Solutions
softpc 215/udp #Insignia Solutions
CAIlic 216/tcp atls #Computer Associates Int'l License Server
CAIlic 216/udp atls #Computer Associates Int'l License Server
dbase 217/tcp #dBASE Unix
dbase 217/udp #dBASE Unix
mpp 218/tcp #Netix Message Posting Protocol
mpp 218/udp #Netix Message Posting Protocol
uarps 219/tcp #Unisys ARPs
uarps 219/udp #Unisys ARPs
imap3 220/tcp #Interactive Mail Access Protocol v3
imap3 220/udp #Interactive Mail Access Protocol v3
fln-spx 221/tcp #Berkeley rlogind with SPX auth
fln-spx 221/udp #Berkeley rlogind with SPX auth
rsh-spx 222/tcp #Berkeley rshd with SPX auth
rsh-spx 222/udp #Berkeley rshd with SPX auth
cdc 223/tcp #Certificate Distribution Center
cdc 223/udp #Certificate Distribution Center
direct 242/tcp
direct 242/udp
sur-meas 243/tcp #Survey Measurement
sur-meas 243/udp #Survey Measurement
dayna 244/tcp
dayna 244/udp
link 245/tcp
link 245/udp
dsp3270 246/tcp #Display Systems Protocol
dsp3270 246/udp #Display Systems Protocol

subntbcst_tftp 247/tcp #subntbcst_tftp
subntbcst_tftp 247/udp #subntbcst_tftp
bhfhs 248/tcp
bhfhs 248/udp
# 249-255 reserved
rap 256/tcp
rap 256/udp
set 257/tcp #secure electronic transaction
set 257/udp #secure electronic transaction
yak-chat 258/tcp #yak winsock personal chat
yak-chat 258/udp #yak winsock personal chat
esro-gen 259/tcp #efficient short remote operations
esro-gen 259/udp #efficient short remote operations
openport 260/tcp
openport 260/udp
nsiiops 261/tcp #iiop name service over tls/ssl
nsiiops 261/udp #iiop name service over tls/ssl
arcisdms 262/tcp
arcisdms 262/udp

[demonas]

нее... надоело вставлять почучуть
Три...
Остальное тут
http://insecure.org/nmap/data/nmap-services