User guide

Packet Filter Services
Reference Guide 61
NNTP
Network News Transfer Protocol (NNTP) is used to transmit Usenet news
articles.
The best way to use NNTP is to set Internal Hosts to internal news
servers, and external hosts to news feeds. In most cases NNTP has to be
enabled in both directions. If you are running a public newsfeed, you
must allow NNTP connections from all external hosts. External hosts can
be spoofed; WatchGuard cannot verify that these packets were actually
sent from the correct location.
Configure WatchGuard to add the source IP address to the Blocked Sites
List whenever an incoming NNTP connection is denied. All of the usual
logging options can be used with NNTP.
Characteristics
•Protocol: TCP
• Server Port(s): 119
• Client Port(s): greater than 1023
•RFC: 977
Common Scenarios
Scenario 1
Description
There exists a “public” NNTP server on the Optional network.
Icons in the Services Arena
An NNTP icon–Incoming Allow From Any To the server.
Scenario 2
Description
There exists a “public” NNTP server on the Trusted network.
Icons in the Services Arena
The configuration will be the same as for Scenario 1.