Number of Rules

[Yardyy]

we have over 60 rules in our rulebase, but i have noticed that that the other FW administrator has been putting in a few extra rules, what i mean is this..

SOURCE DESTINATION SERVICE ACTION
1 ANY WEBSERVER 80 ACCEPT
2 WEBSERVER ANY 80 ACCEPT

Do we need to have rule 2, to allow everyone to access to web pages. I would not have put in the rule 2, but the other FW adin insists that it has to be in there.

would rule number 1 not allow the traffic back after it has been let through the fw.

can anyone clarify please, do we need to have rule 2 ??

Regards


Many Thanks
Yardyy

 

[Piloria]

rule 2 is not needed unless the webserver was surfing the net.

 

[Piloria]

best way to find out if a rule is needed is check the logs and see if it is ever used (or disable it and see if everything works fine)

 

[Yardyy]

thats what i thought, i ususally dont put in rule number 2, but the other fw admin insists on it.

thanks for input.

Many Thanks
Yardyy