2013-01-17 19:40:16 +01:00
|
|
|
#
|
2016-02-15 17:20:38 +01:00
|
|
|
# Shorewall -- /usr/share/shorewall/macro.ActiveDir
|
2013-01-17 19:40:16 +01:00
|
|
|
#
|
2016-02-15 17:20:38 +01:00
|
|
|
# This macro handles ports for Samba 4 Active Directory Service.
|
|
|
|
|
# You can copy this file to /etc/shorewall[6]/ and comment out the ports you
|
|
|
|
|
# do not want open.
|
2014-12-22 17:36:34 +01:00
|
|
|
#
|
|
|
|
|
###############################################################################
|
2016-02-15 17:20:38 +01:00
|
|
|
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
|
|
|
|
|
|
2013-01-17 19:40:16 +01:00
|
|
|
PARAM - - tcp 389 #LDAP services
|
|
|
|
|
PARAM - - udp 389
|
|
|
|
|
PARAM - - tcp 636 #LDAP SSL
|
|
|
|
|
PARAM - - tcp 3268 #LDAP GC
|
|
|
|
|
PARAM - - tcp 3269 #LDAP GC SSL
|
|
|
|
|
PARAM - - tcp 88 #Kerberos
|
|
|
|
|
PARAM - - udp 88
|
|
|
|
|
|
|
|
|
|
# Use macro.DNS for DNS sevice
|
|
|
|
|
|
|
|
|
|
PARAM - - tcp 445 #Replication, User and Computer Authentication, Group Policy, Trusts
|
|
|
|
|
PARAM - - udp 445
|
|
|
|
|
|
|
|
|
|
# Use macro.SMTP for Mail service
|
|
|
|
|
|
|
|
|
|
PARAM - - tcp 135 #RPC, EPM
|
|
|
|
|
PARAM - - tcp 5722 #RPC, DFSR (SYSVOL)
|
|
|
|
|
PARAM - - udp 123 #Windows Time
|
|
|
|
|
PARAM - - tcp 464 #Kerberosb change/set password
|
|
|
|
|
PARAM - - udp 464
|
|
|
|
|
PARAM - - udp 138 #DFS, Group Policy
|
|
|
|
|
PARAM - - tcp 9389 #SOAP
|
|
|
|
|
PARAM - - tcp 2535 #MADCAP
|
|
|
|
|
PARAM - - udp 2535
|
|
|
|
|
PARAM - - udp 137 #NetLogon, NetBIOS Name Resolution
|
|
|
|
|
PARAM - - tcp 139 #DFSN, NetBIOS Session Service, NetLogon
|
|
|
|
|
|
