Allow:
UWNet --> All of CSCFNet (rsh,rlogin,nfs)
DCCoreNet --> All of CSCFNet (tftp)
UW Campus --> CSCF Printers (all protocols)
backup.math --> All of CSCFNet (all protocols)
Nexus servers --> All of CSCFNet (Windows protocols)
UW Campus --> CSCF Domain Controllers (Windows protocols)
UW Campus --> All of CSCFNet (X11)
MFCFNet SGI Support --> Cyclades (HTTP,HTTPS,SSH)
Anywhere --> asimov (Windows protocols)
Anywhere --> mordac oates torres watcher (Zone 5 Defaults)
Anywhere --> cscf.cs debian30.cscf debian31.cscf freebsd5.cscf watcher204.cscf (all protocols)
Anywhere --> turtledove.cscf (BitTorrent ports: 6881 - 6889/tcp)
UW Campus --> All of CSCFNet (Ident)
Anywhere --> All of CSCFNet (Client-only services)
Reject (ie. send a TCP RESET):
Off campus --> All of CSCFNet (Ident)
Deny:
Anything not listed above
PROTOCOL DEFINITIONS:
Client-only services are RDP, SSH, Timbuktu, Ping, and Traceroute. Zone 5 Defaults are AFPoverTCP, FTP, HTTP, HTTPS, ports 139 and 445, and E-mail protocols. E-mail protocols are SMTP, SMTP Submit, POP, POPS, IMAPS, and IMAP. Windows protocols are Internet Locator Service, KerberosV5, Microsoft-DS, Microsoft RPC, Netbios-datagram, and Netbios-session (ie. ports 137-139,445,88,389,636)
-- JasonTestart - 24 Mar 2005 -- MikePatterson - 09 Apr 2005