From: Bruce Esquibel on
Thomas Laus <lausts(a)acm.org> wrote:

> The current best practice for writing firewall rules is to deny
> everything and only open very few ports for internet traffic to and from
> the network, especially for a K-12 system. It looks like you have tried
> all of the 'normal' ones and you are probably out of luck.


Yeah that is a true statement these days.

Only thought I had, if she can use a web browser, port 80 has to be open. If
the remote box isn't running a web server, putting smtp on 80 will be fine.

I really don't think there is a technical reason why sendmail can't use the
high ports, above 1024 or whatever. I think that boundry was created for a
time where "a box" had many users running many programs and some space was
reserved to avoid problems with the ones root had to run.

It's possible the firewall stops somewhere, I've seen them where port 32676
(or 32767) and above were left open.

But these days, block all and punch in a few pinholes is common.

-bruce
bje(a)ripco.com