Networking, Firewall, Special Ports for Mostly Open, Mostly Closed, and Web Only Categories

This page contains information about ports that are treated differently than the group norm in the "Mostly Open", "Mostly Closed", and "Web Only" campus firewall plans.

Ports permitted with Web Only

Traffic on the following ports are permitted to enter a machine in the Web Only firewall category:

Protocol Name
 Purpose
 Port Range
HTTP Web pages TCP Ports 80 and 8080
HTTPS Secure web pages TCP Ports 443 and 8443

Ports permitted with Mostly Closed (and Remote Administration)

Traffic on the following ports are permitted to enter a machine in the Mostly Closed firewall category:

 
Protocol name Purpose Port range
FTP File transfer TCP 21
SFTP Simple FTP TCP/UDP 115
Mail (SMTP) Email transfer, submission TCP 25, TCP/UDP 587
HTTP Web pages TCP 80 and TCP 8080
POP3 Email transfer TCP 110
IMAP Email transfer TCP 143
HTTPS Secure web pages TCP 443 and TCP 8443
H.323 Remote access (including LDAP and other services) TCP 389
TCP 522
TCP 1503
UDP 1719
TCP 1720
TCP 1731
Secure POP, Secure IMAP Secure email transfer TCP/UDP 993
TCP/UDP 995

Note: Systems placed in the Mostly Closed + Remote Administration firewall group will permit the above ports plus:

Protocol name Purpose Port range
SLP Service Location Protocol TCP/UDP 427
SSL SMTP Secure email transfer TCP/UDP 465
NCP Netware Core Protocol TCP/UDP 524
PPTP Point to point tunneling protocol TCP 1723
NoRM Netware remote management TCP/UDP 8009

Ports denied with Mostly Open

Traffic on the following ports are not permitted to enter a machine in the Mostly Open firewall category:

Protocol name Purpose Port range
Mail (SMTP) Email transfer TCP 25
DNS IP information TCP/UDP 53
finger User information TCP 79
HTTP Web pages TCP 80
NNTP News TCP 119
SNMP Network management TCP/UDP 161-162
LDAP Directory services TCP 389
LPD Printer TCP/UDP 515
HTTPS Secure web pages TCP 443
traceroute traceroute UDP 33400-34000
ICMP Network control N/A
IRC Internet chat TCP 6660-6669