#
# Shorewall version 5 - Samba 4 Macro
#
# /usr/share/shorewall/macro.ActiveDir
#
#       This macro handles ports for Samba 4 Active Directory Service
#
# You can comment out the ports you do not want open
#
#
###############################################################################
?FORMAT 2 
###############################################################################
#ACTION	SOURCE	DEST	PROTO	DEST	SOURCE	ORIGIN	RATE	USER/
#				PORT(S)	PORT(S)	DEST	LIMIT	GROUP
PARAM   -       -       tcp     389 	#LDAP services
PARAM   -       -       udp	389  
PARAM   -       -       tcp     636	#LDAP SSL
PARAM   -       -       tcp     3268	#LDAP GC
PARAM   -       -       tcp     3269	#LDAP GC SSL
PARAM   -       -       tcp     88	#Kerberos
PARAM   -       -       udp	88

# Use macro.DNS for DNS sevice

PARAM   -       -       tcp     445	#Replication, User and Computer Authentication, Group Policy, Trusts
PARAM   -       -       udp	445

# Use macro.SMTP for Mail service

PARAM   -       -       tcp     135	#RPC, EPM
PARAM   -       -       tcp     5722	#RPC, DFSR (SYSVOL)
PARAM   -       -       udp	123	#Windows Time
PARAM   -       -       tcp     464	#Kerberosb change/set password
PARAM   -       -       udp	464
PARAM   -       -       udp	138	#DFS, Group Policy
PARAM   -       -       tcp     9389	#SOAP
PARAM   -       -       tcp     2535	#MADCAP
PARAM   -       -       udp	2535
PARAM   -       -       udp     137	#NetLogon, NetBIOS Name Resolution
PARAM   -       -       tcp	139	#DFSN, NetBIOS Session Service, NetLogon