I don't know the model of your firewall. Speaking of blood, I'll tell you. An 80 port can hack your workstation. SQL injection is also done through port 80 of the WEB. Once he uploads the trojan horse. Stole the administrator's authority. FTP license. You can claim your server. .

So I want to ask you about the hardware firewall. And how the strategy is done.

For example, netscreen used by my company and the strategy made by VIP used by me. . Map port 80. At the same time, the policy is to prohibit the external network from writing to the server. Because the company didn't leave a message. BBS and other interactions. So you can do this. If FTP. I will use VPN client to do it. So that's no problem.

My classmate's Cisco used another strategy. Limited access to data and ports.