[ipac] ports open on HIP server

[Natasha Stephan]

Hi all,
I know there are a lot of different documents floating around, and we've
talked about this before, but I thought I'd put together a comprehensive
list of ports that should be listening on the HIP server (in the DMZ).
Unfortunately, I didn't note what should be available from inside and/or
outside traffic.  Can anyone comment on their experiences?
 
Here's my list (for the HIP server):
80 HTTP/JSP server
210 Z39.50 server
220 IMAP3
222 HIP Admin tool
3050 Interbase/Firebird
3060 Interbase/Firebird
1099 requests from Horizon
4444 requests from Horizon
9999 requests from Horizon
4545 XSL
8082 local
8083 local
12501 indexing service
12502 search server
12503 dynamic indexing

Obviously, ports 80 and 210 should be open to inside and outside
traffic.  Port 220 should be accessible to the mail server, wherever it
is (probably inside).  Port 222 should be accessible to my (staff)
desktop, and ports 1099, 4444, and 9999 should be available to all staff
desktops at all of our libraries.  And 12501, 12502, and 12503 should be
open to communication from the Horizon database server (inside).  Right?
 
But what about the ports for Firebird and XSL?  Do those need to
communicate with the HIP server, or the staff VLAN, or the outside
world?  What about those "local" ports?  
 
Thanks,
Natasha
-----
Natasha Stephan
http://leonardo.lindahall.org <http://leonardo.lindahall.org/> 
1-800-662-1545 x750 / 816-926-8750
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.tblc.org/pipermail/ipac/attachments/20080731/1e769071/attachment.html