Teamsite & OD Port Usage

Hi all!

For security reasons we need to block all ports unused by Teamsite or OpenDeploy on our main server.

I've checked the support and documentation on this topic, but when we tried to block all the ports except the ones mentionned into the documentation : https://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=55491

It's not working, and when trying to trace the port usage on the machine, it seems totally erratic, opening new ports each time we try to connect.

Did someone had the same constraint and have any clue on this particular point?

Find more posts tagged with

Comments

Adam Stoller

Hi all!

For security reasons we need to block all ports unused by Teamsite or OpenDeploy on our main server.

I've checked the support and documentation on this topic, but when we tried to block all the ports except the ones mentionned into the documentation : https://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=55491

It's not working, and when trying to trace the port usage on the machine, it seems totally erratic, opening new ports each time we try to connect.

Did someone had the same constraint and have any clue on this particular point?

Are you blocking ports on a firewall, or on the actual server?
Have you identified which application or service is opening which port(s) that you weren't expecting?

Also - you should contact Support and request that they clearly identify the version(s) of the product(s) for which that support page applies.

It would appear to be at least TS 6.x if not 6.7x as it mentions ReportCenter; it also mentions Search; however it does not mention ports used by OpenDeploy (e.g.: 20014, 9173, 8081, etc.) and I'm not sure if SitePublisher / LiveSite uses any additional ports, or MediaBin, or MetaTagger, etc. Of course you did not mention what version of the products you are using, nor what add-on modules and/or IWOV products you are using (besides "Teamite & OD")

Frederik

Also - you should contact Support and request that they clearly identify the version(s) of the product(s) for which that support page applies.

Good point. IWOV has a tendency to produce KB articles that (1) don't specify applicable version; (2) never get updated;
This one states "Modified: 4/29/2006" so I would guess it may not be written with 6.7.x in mind. Not that I'm saying that port use in 6.7.x is necessarily different from 6.5 - I just don't know

kailash1

Best way is to check Admin guide and Release notes.

After that you have still have issues please give details of the products in question in cluding version and what all you have blocked and what OS you are using.

Another option is to contact support.

RonaldV

To add to the confusion:

if you open your firewall for all ports mentioned in the kb you are actually opening too much since most of this ports are only used by the 'localhost', eg they don't need access from other machines.

By only opening port 80 you come a long way in using teamsite though you'll miss preview, opendeploy, filesharing, etc.

Firenze

What exactly is failiing?

Is the webserver coming up but the appserver is not?

How many NIC cards on the Machine?

Are you using DNS or host name entries?