NNTP
Network News Transfer Protocol (NNTP) is used to transmit Usenet news articles.
The best way to use NNTP is to set Internal Hosts to internal news servers, and external hosts to news feeds. In most cases NNTP has to be enabled in both directions. If you are running a public newsfeed, you must allow NNTP connections from all external hosts. External hosts can be spoofed; WatchGuard cannot verify that these packets were actually sent from the correct location.
Configure WatchGuard to add the source IP address to the Blocked Sites List whenever an incoming NNTP connection is denied. All of the usual logging options can be used with NNTP.
Characteristics
- Protocol: TCP
- Server Port(s): 119
- Client Port(s): greater than 1023
- RFC: 977
Common Scenarios
Scenario 1
Description
- There exists a "public" NNTP server on the Optional network.
Icons in the Services Arena
- An NNTP icon--Incoming Allow From Any To the server.
Scenario 2
Description
- There exists a "public" NNTP server on the Trusted network.
Icons in the Services Arena
- The configuration will be the same as for Scenario 1.
|
|
