Port 3128 · HTTP Proxy

Port 3128 is HTTP Proxy, TCP.

Default port for Squid and many other HTTP forward proxies. Clients are pointed at it in browser or system proxy settings.

Palo Alto

Create the service object for this port, then allow the App-ID on it. Restricting the rule to the port's service object keeps the rule working on a non-default port and stops the App-ID matching on other ports. Replace the placeholders with your own rule name and zones.

set service tcp-3128 protocol tcp port 3128

set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application web-browsing service tcp-3128 action allow

Risk and exposure

Rated medium risk. Restrict this port to the sources that need it and keep the service patched; avoid exposing it to the whole internet unless the service is meant to be public.

Check it

• Linux ss -tlnp | grep :3128
• PowerShell Test-NetConnection <host> -Port 3128
• nmap nmap -p 3128 <host>

Related ports

• 80 HTTP
• 593 MS-RPC over HTTP
• 8080 HTTP Alternate
• 1080 SOCKS Proxy
• 5984 CouchDB
• 7001 WebLogic HTTP

← Search all ports