Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In Windows 2008 I see inbound and outbound rules, I can open TCP and UDP in both directions. So if I open some port in TCP and some in UDP inbound and the connection works, why do I need outbound rules?

share|improve this question
add comment

3 Answers 3

up vote 1 down vote accepted

outbound rules are matching connections from your server to another. So if you want to browse the internet (from your server) you need to open at least 80/tcp outbound.

share|improve this answer
    
outbound rules are matching connections from your server to another _____ . Another what ? Another server ? Like server meaning Windows 2008 pc. –  user55612 Sep 29 '10 at 10:16
    
TO other network addresses meaning local servers, PCs, but it also defines hosts in whole network groups ("the internet", machines i a DMZ etc.) –  splattne Sep 29 '10 at 11:53
add comment

Outbound rules define which connections your server can open to other network hosts, meaning that the server itself initiates the connection.

An example: on your server runs an IIS/ASP.NET application that has to connect to a SQL Server machine. You'll have to allow the ports necessary to connect to that server.

share|improve this answer
add comment

Outbound rules can be useful to prevent data exfiltration. If a hacker does get into your system, under a non-administrative account AND you have outbound rules blocking ports, you might be able to prevent him from stealing your data. In theory, outbound rules would prevent him from connecting back to his server. Some hardware firewalls (cisco, fortinet, juniper, etc.) have this capability which is usually called Data Leak Prevention.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.