Topic: masq-manager's port deny

[funkusmunkus]

Hi all,

I'm a little sick of telling people off at work for doing things they aren't supposed to do, I already have dansguardian in place, but I want to block all out going traffic with the exception of ssh, mail, news; and http.
So would all I have to leave open are ports 22, 25, 53, 80, 113, 139, 443, 389 8080, 110, 119  ??? is there something I'm missing? Is there something that I don't have to include ??

The SME server only acts as a gateway(proxy), and mail server, and have some shared folders for a couple of users, and I use it to test websites before they go live, we have an sbs2003 that is the domain controller, and hands out dhcp leases.

I'm running SME 6.0.1 with the smeplus updates, and sme-6.0-masq-manager-0.1-2

I haven't used port deny before, it looks pretty straight forward, but if there's something weird that I should note, I would appreciate it.

Cheers all