CSCFNetFirewallPolicies < CF

CF Web>CscfSpecific>CSCFNetFirewallPolicies (2010-02-17, TrevorGrove) (raw view)

---+++ This is obsolete and should be ignored, trg 2010-2-17


Allow:

  UWNet         --> All of CSCFNet          (rsh,rlogin,nfs)

  !DCCoreNet     --> All of CSCFNet          (tftp)

  UW Campus     --> CSCF Printers           (all protocols)

  backup.math   --> All of CSCFNet          (all protocols)

  Nexus servers --> All of CSCFNet          (Windows protocols)

  UW Campus     --> CSCF Domain Controllers (Windows protocols)

  UW Campus     --> All of CSCFNet          (X11)

  MFCFNet
  SGI Support   --> Cyclades                (HTTP,HTTPS,SSH)

  Anywhere      --> asimov                  (Windows protocols)

  Anywhere      --> mordac
                    oates
                    torres
                    watcher                 (Zone 5 Defaults)

  Anywhere      --> cscf.cs
                    debian30.cscf
                    debian31.cscf
                    freebsd5.cscf
                    watcher204.cscf         (all protocols)

  Anywhere      --> turtledove.cscf         (!BitTorrent ports: 6881 - 6889/tcp)

  UW Campus     --> All of CSCFNet          (Ident)

  Anywhere      --> All of CSCFNet          (Client-only services)

Reject (ie. send a TCP RESET):

  Off campus    --> All of CSCFNet          (Ident)

Deny:

  Anything not listed above

PROTOCOL DEFINITIONS:

  Client-only services are RDP, SSH, Timbuktu, Ping, and Traceroute.
  Zone 5 Defaults are !AFPoverTCP, FTP, HTTP, HTTPS, ports 139 and 445,
                      and E-mail protocols.
  E-mail protocols are SMTP, SMTP Submit,
                       POP, POPS, IMAPS, and IMAP.
  Windows protocols are Internet Locator Service, !KerberosV5,
                        Microsoft-DS, Microsoft RPC, Netbios-datagram,
                        and Netbios-session
                        (ie. ports 137-139,445,88,389,636) 


-- Main.JasonTestart - 24 Mar 2005
-- Main.MikePatterson - 09 Apr 2005

Topic revision: r4 - 2010-02-17 - TrevorGrove

Information in this area is meant for use by CSCF staff and is not official documentation, but anybody who is interested is welcome to use it if they find it useful.

Other Webs

My links
- People
- CERAS
- WatForm
- Tetherless lab
- Ubuntu Main.HowTo
- eDocs
- RGG NE notes
- RGG
- CS infrastructure
- Grad images

Edit