mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-22 23:53:30 +01:00
43 lines
1.6 KiB
Plaintext
43 lines
1.6 KiB
Plaintext
#
|
|
# Shorewall version 4 - Samba 4 Macro
|
|
#
|
|
# /usr/share/shorewall/macro.ActiveDir
|
|
#
|
|
# This macro handles ports for Samba 4 Active Directory Service
|
|
#
|
|
# You can comment out the ports you do not want open
|
|
#
|
|
#
|
|
###############################################################################
|
|
?FORMAT 2
|
|
###############################################################################
|
|
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
|
# PORT(S) PORT(S) DEST LIMIT GROUP
|
|
PARAM - - tcp 389 #LDAP services
|
|
PARAM - - udp 389
|
|
PARAM - - tcp 636 #LDAP SSL
|
|
PARAM - - tcp 3268 #LDAP GC
|
|
PARAM - - tcp 3269 #LDAP GC SSL
|
|
PARAM - - tcp 88 #Kerberos
|
|
PARAM - - udp 88
|
|
|
|
# Use macro.DNS for DNS sevice
|
|
|
|
PARAM - - tcp 445 #Replication, User and Computer Authentication, Group Policy, Trusts
|
|
PARAM - - udp 445
|
|
|
|
# Use macro.SMTP for Mail service
|
|
|
|
PARAM - - tcp 135 #RPC, EPM
|
|
PARAM - - tcp 5722 #RPC, DFSR (SYSVOL)
|
|
PARAM - - udp 123 #Windows Time
|
|
PARAM - - tcp 464 #Kerberosb change/set password
|
|
PARAM - - udp 464
|
|
PARAM - - udp 138 #DFS, Group Policy
|
|
PARAM - - tcp 9389 #SOAP
|
|
PARAM - - tcp 2535 #MADCAP
|
|
PARAM - - udp 2535
|
|
PARAM - - udp 137 #NetLogon, NetBIOS Name Resolution
|
|
PARAM - - tcp 139 #DFSN, NetBIOS Session Service, NetLogon
|
|
|