2013-01-17 19:40:16 +01:00
|
|
|
#
|
2015-07-28 19:59:11 +02:00
|
|
|
# Shorewall version 5 - Samba 4 Macro
|
2013-01-17 19:40:16 +01:00
|
|
|
#
|
|
|
|
|
# /usr/share/shorewall/macro.ActiveDir
|
|
|
|
|
#
|
|
|
|
|
# This macro handles ports for Samba 4 Active Directory Service
|
|
|
|
|
#
|
|
|
|
|
# You can comment out the ports you do not want open
|
|
|
|
|
#
|
2014-12-22 17:36:34 +01:00
|
|
|
#
|
|
|
|
|
###############################################################################
|
|
|
|
|
?FORMAT 2
|
2013-01-17 19:40:16 +01:00
|
|
|
###############################################################################
|
2014-12-22 17:36:34 +01:00
|
|
|
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
|
|
|
|
|
# PORT(S) PORT(S) DEST LIMIT GROUP
|
2013-01-17 19:40:16 +01:00
|
|
|
PARAM - - tcp 389 #LDAP services
|
|
|
|
|
PARAM - - udp 389
|
|
|
|
|
PARAM - - tcp 636 #LDAP SSL
|
|
|
|
|
PARAM - - tcp 3268 #LDAP GC
|
|
|
|
|
PARAM - - tcp 3269 #LDAP GC SSL
|
|
|
|
|
PARAM - - tcp 88 #Kerberos
|
|
|
|
|
PARAM - - udp 88
|
|
|
|
|
|
|
|
|
|
# Use macro.DNS for DNS sevice
|
|
|
|
|
|
|
|
|
|
PARAM - - tcp 445 #Replication, User and Computer Authentication, Group Policy, Trusts
|
|
|
|
|
PARAM - - udp 445
|
|
|
|
|
|
|
|
|
|
# Use macro.SMTP for Mail service
|
|
|
|
|
|
|
|
|
|
PARAM - - tcp 135 #RPC, EPM
|
|
|
|
|
PARAM - - tcp 5722 #RPC, DFSR (SYSVOL)
|
|
|
|
|
PARAM - - udp 123 #Windows Time
|
|
|
|
|
PARAM - - tcp 464 #Kerberosb change/set password
|
|
|
|
|
PARAM - - udp 464
|
|
|
|
|
PARAM - - udp 138 #DFS, Group Policy
|
|
|
|
|
PARAM - - tcp 9389 #SOAP
|
|
|
|
|
PARAM - - tcp 2535 #MADCAP
|
|
|
|
|
PARAM - - udp 2535
|
|
|
|
|
PARAM - - udp 137 #NetLogon, NetBIOS Name Resolution
|
|
|
|
|
PARAM - - tcp 139 #DFSN, NetBIOS Session Service, NetLogon
|
|
|
|
|
|
