CFP3/Help Guide/Firewall Task Center/My Port Sets

From ComodoWiki

Firewall Tasks > Common Tasks - My Port Sets

Port Sets are handy, predefined groupings of one or more ports that can be re-used and deployed across multiple Application Rules and Global Rules.  

The name of the port set is listed above the actual port numbers that belong to that set. The default port sets shipped with Comodo Firewall are:

HTTP Ports: 80 and 443. These are the default ports for http traffic. Your internet browser will use this ports to connect to the internet and other networks.

POP3/SMTP Ports: 110, 25, 143, 995, 465. These are the ports that are typically used by mail clients like Outlook Express and WinMail for communication using the POP3, SMTP and IMAP protocols.

Privileged Ports:  0-1024 - This set can be deployed if you wish to create a rule that allows or blocks access to the priveleged port range of 0-1024. Priveleged ports are so called because it is usually desirable to prevent users from running services on these ports. Network admins usually reserve or prohibit the use of these ports.

• To Add a new port set, you need to: 
  
  (i) Define a name for the set
  
  (ii) Select the port numbers you want to belong to this named set
  
• Define a name for the set - Click the 'Add...' button on the right hand side and select 'A New Port Set...' from the drop down menu:

• Next type a name for the port set. In the example below, we have chosen to name our port set 'A test port set'
  
  

• Click Apply. The new port set will appear in the main port set list:
  
  

• Select the port numbers you want to belong to this named set -

  Right click on the name of the new port set and select 'Add...' from the menu:
  
  

• This will open the port selection dialog:
  
  Specify 'Any' to choose all ports; specify a single port or define a port range by typing the start and end port numbers. Click Apply to commit your choice. If you wish to add more ports to this set then repeat the process from 'Select the port numbers you want to belong to this named set'

• To edit the name of an existing port set - select the name of the set in the list (e.g. HTTP Ports) and click 'Edit...' to bring up the naming dialog.
  
• To add port numbers to an existing port set - right click on the set name and click 'add..' as shown earlier OR select the port set name, click the 'Add..' button on the right and select 'A new port' from the drop down menu.
  
• To modify or change the existing port numbers in a port set - right click ON the port number you wish to change and select 'Edit..' OR select the actual port number (not the port set name) and click the 'Edit... button on the right.

When defining or modifying a network control rule, any port sets listed in this interface, including any new ones you create, will be available for selection and deployment in the 'Source Port' and 'Destination Port' tabs by selecting 'A set of Ports' :