Services in Kerio Control

Services

Services are defined by a communication protocol and by a port number (e.g. the HTTPHypertext Transfer Protocol - protocol for exchange of hypertext documents in HTML. service uses the TCPTransmission Control Protocol - ensures packet transmission. protocol with the port number 80). You can create groups of services which simplifies creating traffic rules.

You can also match so-called protocol inspector with certain service types. For more information refer to Protocol inspection in Kerio Control.

Using services

Example: You want to perform protocol inspector of the HTTP protocol at port 8080:

1. In the administration interface, go to Definitions > Services. Some standard services, such as HTTP, FTPFile Transfer Protocol - Protocol for transferring computer files from a server., DNSDomain Name System - A database enables the translation of hostnames to IP addresses and provides other domain related information. etc., are already predefined.
2. Click Add.
3. In the Add Service dialog, type a name of a new service — HTTP 8080.
4. Type a description.
5. Select a TCP protocol.

6. Select the HTTP protocol inspector.
7. Type 8080 to Destination port. If the TCP or UDPUser Datagram Protocol - ensures packet transmission. communication protocol is used, the service is defined with its port number. In case of standard client-server types, a server is listening for connections on a particular port (the number relates to the service), whereas clients do not know their port in advance (ports are assigned to clients during connection attempts). This means that source ports are usually not specified, while destination ports are usually known in case of standard services. Source and destination ports can be specified as:

• Any — all the ports available (1-65535)
• Equal to — a particular port (e.g.80)
• Greater than, Less than — all ports with a number that is either greater or less than the number defined
• In range — all ports that fit to the range defined (including the initial and the terminal ones)
• List — list of the ports divided by commas (e.g. 80,8000,8080)

8. Save the settings.

This ensures that the HTTP protocol inspector will be automatically applied to any TCP traffic at port 8080 and passing through Kerio Control.

Creating service groups

Creating service groups simplifies creating traffic rules because you do not have to use all the services in your traffic rules. If you need a rule for more services, create a group of all these services and work with the group during creating the traffic rule. For more information refer to Configuring traffic rules.

A good example for creating group of services is Kerio Connect — mail server from Kerio Technologies.

1. In the administration interface, go to Definitions > Services.
2. Click Add > Add Service Group.
3. In the Add Service Group dialog, type a name of the new group.
4. Click Add.
5. In the Select items dialog, select required service and click OK.
6. Repeat step 5 for other services.
7. When the new service group is ready, click OK.

The service group is finished and you can use it for creating a traffic rule.