College of Engineering - Standard Firewall Rules: COE–FRP–01

The initial configuration assumes that all inbound connections from outside the College of Engineering are un-trusted, and therefore blocked with exceptions.  The following exceptions have been researched thus far and are to be placed into the active exceptions.

Service

Port

Functionality

SSH

22,  989, 990, 992, 993, 995

Provides encrypted channel for various, otherwise unencrypted services.

HTTP/HTTPS*

80, 443, 8080

Web services and secure web services

Streaming Media*

7070, 554

Hosting of Streaming Media

DNS*

53

Domain Name Service

SMTP*

25

Simple Mail Transfer

TSM Backup^

1500

Server initiated backups from University

FIT

ALL

128.118.1.137, 118.118.141.3

SOS Scanner

ALL

146.186.7.17

DFS

ALL

University DFS Servers

DCE^

ALL

University DCE server - 128.118.141.33, 128.118.141.34   146.186.5.98

DCS

ALL

University DCS Servers

OAS Printing

ALL

University OAS Servers

*Indicates the exceptions will be made for only approved servers
^Indicates the exceptions will be made for allowed external hosts only

All other inbound connections are disallowed and must be tunneled through a secure VPN connection.  That is, unless an exception is approved (see Exception Process below).

Conversely, all outbound initiated traffic is allowed with the following exceptions and reasoning:

Service

Port

Reason for restriction

SMTP

25*

Prevents installation of unauthorized SMTP servers that may be used as dissemination points for malicious code or spam

Kazaa

1214

Blocks P2P software used primarily to exchange copy written material

 

Last updated: 11/3/2006

Back to top

Electronic & Computer Services (ECS)

ECS is designing for the future.