Networking, Firewall, Special Ports for Mostly Open, Mostly Closed, and Web Only Categories

This page contains information about ports that are treated differently than the group norm in the "Mostly Open", "Mostly Closed", and "Web Only" campus firewall plans.

Ports permitted with Web Only

Traffic on the following ports are permitted to enter a machine in the Web Only firewall category:

Protocol Name
Purpose
Port Range
HTTP
Web pages
TCP Ports 80 and 8080
HTTPS
Secure web pages
TCP Ports 443 and 8443


Ports permitted with Mostly Closed (and Remote Administration)

Traffic on the following ports are permitted to enter a machine in the Mostly Closed firewall category:

 
Protocol namePurposePort range
FTPFile transferTCP 21
SFTP
Simple FTP
TCP/UDP 115
Mail (SMTP)Email transfer, submission
TCP 25, TCP/UDP 587
HTTPWeb pagesTCP 80 and TCP 8080
POP3Email transferTCP 110
IMAPEmail transferTCP 143
HTTPSSecure web pagesTCP 443 and TCP 8443
H.323Remote access (including LDAP and other services)TCP 389
TCP 522
TCP 1503
UDP 1719
TCP 1720
TCP 1731
Secure POP, Secure IMAPSecure email transferTCP/UDP 993
TCP/UDP 995

Note: Systems placed in the Mostly Closed + Remote Administration firewall group will permit the above ports plus:

Protocol namePurposePort range
SLPService Location ProtocolTCP/UDP 427
SSL SMTPSecure email transferTCP/UDP 465
NCPNetware Core ProtocolTCP/UDP 524
PPTPPoint to point tunneling protocolTCP 1723
NoRMNetware remote managementTCP/UDP 8009

Ports denied with Mostly Open

Traffic on the following ports are not permitted to enter a machine in the Mostly Open firewall category:

Protocol namePurposePort range
Mail (SMTP)Email transferTCP 25
DNSIP informationTCP/UDP 53
fingerUser informationTCP 79
HTTPWeb pagesTCP 80
NNTPNewsTCP 119
SNMPNetwork managementTCP/UDP 161-162
LDAPDirectory servicesTCP 389
LPDPrinterTCP/UDP 515
HTTPSSecure web pagesTCP 443
traceroutetracerouteUDP 33400-34000
ICMPNetwork controlN/A
IRCInternet chatTCP 6660-6669