Watchguard Firebox SOHO 6 User Manual page 91

When a computer in the trusted network uses a SOCKS-compatible
application, other users on the trusted network have free access to the
SOCKS proxy on that computer. Disable SOCKS on the SOHO 6 to
prevent this security risk. See "Disabling SOCKS on the SOHO 6" on
page 69.
Configuring your SOCKS application
To allow a SOCKS-compatible application on a computer in the
trusted network to communicate with a computer on the external
network, configure the application as described below. To make
these settings, refer to the user's guide for the application.
The SOHO 6 uses port 1080 to communicate with a computer that uses a
SOCKS-compatible application. Make sure that port 1080 is not in use
by other applications on the computer.
• If there is a selection of protocols or SOCKS versions, select
SOCKS version 5.
• Select port 1080.
• Set the SOCKS proxy to the URL or IP address of the SOHO 6.
The default IP address is: http://192.168.111.1.
Disabling SOCKS on the SOHO 6
After a SOCKS-compatible application has connected through the
SOHO 6, the SOCKS port stays open. After the application
terminates, the SOCKS port is available to anyone on your trusted
network. The following steps prevent this security problem.
User Guide
N
OTE
N
OTE
Firewall Options
69