Firewall: Difference between revisions

From CSCWiki
Jump to navigation Jump to search
(Add Mosh ports to general use)
(Expand list of firewall rules)
Line 9: Line 9:
== General Use ==
== General Use ==


* Port 22 (SSH), plus additional ports on taurine
* Port 22 (SSH), plus additional SSH ports on taurine (21, 53, 80, 81, 443, 8000, 8080)
* Ports 60000–61000 (Mosh)
* Ports 60000–61000 (Mosh)
* Ports 28000-28500 (TCP/UDP general use)
* Ports 28000-28500 (TCP/UDP general use)
Line 15: Line 15:
== Webserver ==
== Webserver ==


caffeine has ports 80 and 443 open
* caffeine has ports 22 (SSH), 80 (HTTP), 443 (HTTPS), 11068 (HTTP for rridge) and UDP 60000–61000 (Mosh)
* wiki has ports 80 (HTTP) and 443 (HTTPS)
* git has ports 80 (HTTP) and 443 (HTTPS)


== Mail ==
== Mail ==


Mail has ports 80, 443, 143, 993, 25, 587 open
* mail has ports 25 (SMTP), 80 (HTTP), 143 (IMAP), 443 (HTTPS), 587 (MAIL SUBMISSION), 993 (IMAPS)
* mailman has ports 80 (HTTP) and 443 (HTTPS)


== Mirror ==
== Mirror ==


Mirror has 21 (ftp), 80, 443, 873 (rsync) open.
* mirror has ports 21 (FTP), 22 (SSH), 80 (HTTP), 443 (HTTPS), 873 (RSYNC)

== IPv6 Test ==

* ds.test-ipv6, mtu1280.test-ipv6 have ports 80 (HTTP), 443 (HTTPS)
* v6ns1.test-ipv6 has port 53 (DNS)

== Cloud ==

* load-balancer: 22 (SSH), 80 (HTTP) and 443 (HTTPS)
* load-balancer.cloud: 80 (HTTP) and 443 (HTTPS)
* object.cloud.csclub: 80 (HTTP) and 443 (HTTPS)

== Other Web Services ==

rt, munin, prometheus

* 80 (HTTP) and 443 (HTTPS)


= Adding Exceptions =
= Adding Exceptions =

Revision as of 22:24, 11 April 2018

Our networks are behind the University's Campus firewall. This means that traffic to us is automatically dropped at the edge of campus unless we have exceptions added for it.

Current Exceptions

Office Terminals

No exceptions in the campus firewall.

General Use

  • Port 22 (SSH), plus additional SSH ports on taurine (21, 53, 80, 81, 443, 8000, 8080)
  • Ports 60000–61000 (Mosh)
  • Ports 28000-28500 (TCP/UDP general use)

Webserver

  • caffeine has ports 22 (SSH), 80 (HTTP), 443 (HTTPS), 11068 (HTTP for rridge) and UDP 60000–61000 (Mosh)
  • wiki has ports 80 (HTTP) and 443 (HTTPS)
  • git has ports 80 (HTTP) and 443 (HTTPS)

Mail

  • mail has ports 25 (SMTP), 80 (HTTP), 143 (IMAP), 443 (HTTPS), 587 (MAIL SUBMISSION), 993 (IMAPS)
  • mailman has ports 80 (HTTP) and 443 (HTTPS)

Mirror

  • mirror has ports 21 (FTP), 22 (SSH), 80 (HTTP), 443 (HTTPS), 873 (RSYNC)

IPv6 Test

  • ds.test-ipv6, mtu1280.test-ipv6 have ports 80 (HTTP), 443 (HTTPS)
  • v6ns1.test-ipv6 has port 53 (DNS)

Cloud

  • load-balancer: 22 (SSH), 80 (HTTP) and 443 (HTTPS)
  • load-balancer.cloud: 80 (HTTP) and 443 (HTTPS)
  • object.cloud.csclub: 80 (HTTP) and 443 (HTTPS)

Other Web Services

rt, munin, prometheus

  • 80 (HTTP) and 443 (HTTPS)

Adding Exceptions

The CSC systems committee can request additional exceptions by emailing request@uwaterloo.ca