Appendix E. Firewall Macro Definitions

Amanda

Amanda Backup

Actionprotodportsport

PARAM

udp

10080

PARAM

tcp

10080

Auth

Auth (identd) traffic

Actionprotodportsport

PARAM

tcp

113

BGP

Border Gateway Protocol traffic

Actionprotodportsport

PARAM

tcp

179

BitTorrent

BitTorrent traffic for BitTorrent 3.1 and earlier

Actionprotodportsport

PARAM

tcp

6881:6889

PARAM

udp

6881

BitTorrent32

BitTorrent traffic for BitTorrent 3.2 and later

Actionprotodportsport

PARAM

tcp

6881:6999

PARAM

udp

6881

CVS

Concurrent Versions System pserver traffic

Actionprotodportsport

PARAM

tcp

2401

Ceph

Ceph Storage Cluster traffic (Ceph Monitors, OSD & MDS Daemons)

Actionprotodportsport

PARAM

tcp

6789

PARAM

tcp

3300

PARAM

tcp

6800:7300

Citrix

Citrix/ICA traffic (ICA, ICA Browser, CGP)

Actionprotodportsport

PARAM

tcp

1494

PARAM

udp

1604

PARAM

tcp

2598

DAAP

Digital Audio Access Protocol traffic (iTunes, Rythmbox daemons)

Actionprotodportsport

PARAM

tcp

3689

PARAM

udp

3689

DCC

Distributed Checksum Clearinghouse spam filtering mechanism

Actionprotodportsport

PARAM

tcp

6277

DHCPfwd

Forwarded DHCP traffic

Actionprotodportsport

PARAM

udp

67:68

67:68

DHCPv6

DHCPv6 traffic

Actionprotodportsport

PARAM

udp

546:547

546:547

DNS

Domain Name System traffic (upd and tcp)

Actionprotodportsport

PARAM

udp

53

PARAM

tcp

53

Distcc

Distributed Compiler service

Actionprotodportsport

PARAM

tcp

3632

FTP

File Transfer Protocol

Actionprotodportsport

PARAM

tcp

21

Finger

Finger protocol (RFC 742)

Actionprotodportsport

PARAM

tcp

79

GNUnet

GNUnet secure peer-to-peer networking traffic

Actionprotodportsport

PARAM

tcp

2086

PARAM

udp

2086

PARAM

tcp

1080

PARAM

udp

1080

GRE

Generic Routing Encapsulation tunneling protocol

Actionprotodportsport

PARAM

47

Git

Git distributed revision control traffic

Actionprotodportsport

PARAM

tcp

9418

HKP

OpenPGP HTTP key server protocol traffic

Actionprotodportsport

PARAM

tcp

11371

HTTP

Hypertext Transfer Protocol (WWW)

Actionprotodportsport

PARAM

tcp

80

HTTPS

Hypertext Transfer Protocol (WWW) over SSL

Actionprotodportsport

PARAM

tcp

443

ICPV2

Internet Cache Protocol V2 (Squid) traffic

Actionprotodportsport

PARAM

udp

3130

ICQ

AOL Instant Messenger traffic

Actionprotodportsport

PARAM

tcp

5190

IMAP

Internet Message Access Protocol

Actionprotodportsport

PARAM

tcp

143

IMAPS

Internet Message Access Protocol over SSL

Actionprotodportsport

PARAM

tcp

993

IPIP

IPIP capsulation traffic

Actionprotodportsport

PARAM

94

IPsec

IPsec traffic

Actionprotodportsport

PARAM

udp

500

500

PARAM

50

IPsecah

IPsec authentication (AH) traffic

Actionprotodportsport

PARAM

udp

500

500

PARAM

51

IPsecnat

IPsec traffic and Nat-Traversal

Actionprotodportsport

PARAM

udp

500

PARAM

udp

4500

PARAM

50

IRC

Internet Relay Chat traffic

Actionprotodportsport

PARAM

tcp

6667

Jetdirect

HP Jetdirect printing

Actionprotodportsport

PARAM

tcp

9100

L2TP

Layer 2 Tunneling Protocol traffic

Actionprotodportsport

PARAM

udp

1701

LDAP

Lightweight Directory Access Protocol traffic

Actionprotodportsport

PARAM

tcp

389

LDAPS

Secure Lightweight Directory Access Protocol traffic

Actionprotodportsport

PARAM

tcp

636

MDNS

Multicast DNS

Actionprotodportsport

PARAM

udp

5353

MSNP

Microsoft Notification Protocol

Actionprotodportsport

PARAM

tcp

1863

MSSQL

Microsoft SQL Server

Actionprotodportsport

PARAM

tcp

1433

Mail

Mail traffic (SMTP, SMTPS, Submission)

Actionprotodportsport

PARAM

tcp

25

PARAM

tcp

465

PARAM

tcp

587

Munin

Munin networked resource monitoring traffic

Actionprotodportsport

PARAM

tcp

4949

MySQL

MySQL server

Actionprotodportsport

PARAM

tcp

3306

NNTP

NNTP traffic (Usenet).

Actionprotodportsport

PARAM

tcp

119

NNTPS

Encrypted NNTP traffic (Usenet)

Actionprotodportsport

PARAM

tcp

563

NTP

Network Time Protocol (ntpd)

Actionprotodportsport

PARAM

udp

123

NeighborDiscovery

IPv6 neighbor solicitation, neighbor and router advertisement

Actionprotodportsport

PARAM

icmpv6

router-solicitation

PARAM

icmpv6

router-advertisement

PARAM

icmpv6

neighbor-solicitation

PARAM

icmpv6

neighbor-advertisement

OSPF

OSPF multicast traffic

Actionprotodportsport

PARAM

89

OpenVPN

OpenVPN traffic

Actionprotodportsport

PARAM

udp

1194

PCA

Symantec PCAnywere (tm)

Actionprotodportsport

PARAM

udp

5632

PARAM

tcp

5631

PMG

Proxmox Mail Gateway web interface

Actionprotodportsport

PARAM

tcp

8006

POP3

POP3 traffic

Actionprotodportsport

PARAM

tcp

110

POP3S

Encrypted POP3 traffic

Actionprotodportsport

PARAM

tcp

995

PPtP

Point-to-Point Tunneling Protocol

Actionprotodportsport

PARAM

47

PARAM

tcp

1723

Ping

ICMP echo request

Actionprotodportsport

PARAM

icmp

echo-request

PostgreSQL

PostgreSQL server

Actionprotodportsport

PARAM

tcp

5432

Printer

Line Printer protocol printing

Actionprotodportsport

PARAM

tcp

515

RDP

Microsoft Remote Desktop Protocol traffic

Actionprotodportsport

PARAM

tcp

3389

RIP

Routing Information Protocol (bidirectional)

Actionprotodportsport

PARAM

udp

520

RNDC

BIND remote management protocol

Actionprotodportsport

PARAM

tcp

953

Razor

Razor Antispam System

Actionprotodportsport

PARAM

tcp

2703

Rdate

Remote time retrieval (rdate)

Actionprotodportsport

PARAM

tcp

37

Rsync

Rsync server

Actionprotodportsport

PARAM

tcp

873

SANE

SANE network scanning

Actionprotodportsport

PARAM

tcp

6566

SMB

Microsoft SMB traffic

Actionprotodportsport

PARAM

udp

135,445

PARAM

udp

137:139

PARAM

udp

1024:65535

137

PARAM

tcp

135,139,445

SMBswat

Samba Web Administration Tool

Actionprotodportsport

PARAM

tcp

901

SMTP

Simple Mail Transfer Protocol

Actionprotodportsport

PARAM

tcp

25

SMTPS

Encrypted Simple Mail Transfer Protocol

Actionprotodportsport

PARAM

tcp

465

SNMP

Simple Network Management Protocol

Actionprotodportsport

PARAM

udp

161:162

PARAM

tcp

161

SPAMD

Spam Assassin SPAMD traffic

Actionprotodportsport

PARAM

tcp

783

SSH

Secure shell traffic

Actionprotodportsport

PARAM

tcp

22

SVN

Subversion server (svnserve)

Actionprotodportsport

PARAM

tcp

3690

SixXS

SixXS IPv6 Deployment and Tunnel Broker

Actionprotodportsport

PARAM

tcp

3874

PARAM

udp

3740

PARAM

41

PARAM

udp

5072,8374

Squid

Squid web proxy traffic

Actionprotodportsport

PARAM

tcp

3128

Submission

Mail message submission traffic

Actionprotodportsport

PARAM

tcp

587

Syslog

Syslog protocol (RFC 5424) traffic

Actionprotodportsport

PARAM

udp

514

PARAM

tcp

514

TFTP

Trivial File Transfer Protocol traffic

Actionprotodportsport

PARAM

udp

69

Telnet

Telnet traffic

Actionprotodportsport

PARAM

tcp

23

Telnets

Telnet over SSL

Actionprotodportsport

PARAM

tcp

992

Time

RFC 868 Time protocol

Actionprotodportsport

PARAM

tcp

37

Trcrt

Traceroute (for up to 30 hops) traffic

Actionprotodportsport

PARAM

udp

33434:33524

PARAM

icmp

echo-request

VNC

VNC traffic for VNC display’s 0 - 99

Actionprotodportsport

PARAM

tcp

5900:5999

VNCL

VNC traffic from Vncservers to Vncviewers in listen mode

Actionprotodportsport

PARAM

tcp

5500

Web

WWW traffic (HTTP and HTTPS)

Actionprotodportsport

PARAM

tcp

80

PARAM

tcp

443

Webcache

Web Cache/Proxy traffic (port 8080)

Actionprotodportsport

PARAM

tcp

8080

Webmin

Webmin traffic

Actionprotodportsport

PARAM

tcp

10000

Whois

Whois (nicname, RFC 3912) traffic

Actionprotodportsport

PARAM

tcp

43