Securing Ports

johnjamesmarsh

Solaris TS5.5.5.2, OD 5.5.1, DD 5.5.1
w2k IIS virtualisation server + Mettagger

Hi,

I have been asked for a list of ports that need to be left open to allow our system to work. I have found https://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=49044 with a lot of details in it but it doesn't show whether these ports need to left open between the servers or from client to server. The basic situation is:

Solaris TS + OD server
w2k Metatagger, IIS, OD receiver

The servers have all been placed behind a firewall and the clients (i.e. IE 6) are on the other side. Does anyone have a list of which ports need to be open through the firewall? As far as I can see it should be 80, 81, 443, 1080, 8081, 20014 and the metatagger ports (9090 and 9095 between TS and MT). The article says:

Port#80 : iw-webd
Port#81 : Usually customer Webserver
Port#443 : iw-webd SSL
Port#1080: iwproxy
Port#8007: Servlet Engine
Port#8080: Servlet Engine

Port# 9173
Port 389 if using LDAP

And the range of port numbers specified in the <iw-home>\iwopenapi\

By default, OpenDeploy uses the following port numbers:
Port#20014
Port#9173
Port#8081
Port#1099
Ports 24071 through 24085 (RMI)

Has anyone done this? Any help would be greatly appreciated.

Regards

John

Dwayne

The servers have all been placed behind a firewall and the clients (i.e. IE 6) are on the other side

Assuming this is true, then:

Port#80 : iw-webd Yes, you need this one
Port#81 : Usually customer Webserver You probably don't need this one - proxy does it for you
Port#443 : iw-webd SSL Yes, you need this one
Port#1080: iwproxy You probably don't need this one - iw-webd does it for you
Port#8007: Servlet Engine You probably don't need this one
Port#8080: Servlet Engine You probably don't need this one

Port# 9173 You probably don't need this one, unless OD and TS on opposite sides of firewall
Port 389 if using LDAP You probably don't need this one, unless LDAP server and TS on opposite sides of firewall

Port#20014 You probably don't need this one, unless OD and TS on opposite sides of firewall
Port#9173 You probably don't need this one, unless OD and TS on opposite sides of firewall
Port#8081 Yes, you need this one
Port#1099 You probably don't need this one
Ports 24071 through 24085 (RMI) You probably don't need this one, unless OD and TS on opposite sides of firewall


--

Current project: TS 5.5.2/6.1 W2K