Description

We want to configure our server firewall to limit access.  What ports need to be open, and to who?

Resolution

You can see most of the ports that Aleph is using by doing util w/1/1 on the server. Though all of the ports you see are active, you may not actually be using some of them.  These are ports which are commonly used:

* apache:  899n (or 80): should be open to the world (or at least the IP's of all OPAC users)

* (If SSL is used): 443 (HTTPD_PORT specified in $alephe_root/aleph_start):  HTTPD_PORT should be open to the world (or at least the IP's of all OPAC users)

* www_server:  499n: internal only, accessed only by apache

* pc_server:  699n: needs to be open to  the IP's  of staff using the GUI

*sip2_server: 533n: needs to be open to the self-check machine IP's

* slnp_server: 544n

* oclc_server: 577n: needs to be open to OCLC's IP's

* ncip_server:   599n: needs to be open to NCIP partners' IP addresses

* z39_gate:   799n

* ill_server:  900n:  needs to be open to ILL partners' IP addresses 

* z39_server: 999n:  should be open to the world (or at least the IP's of all z39.50 users of your server)

* jboss/tomcat: 189n: needs to be open to Primo IP address

* PDS_PORT: internal port; check $alephe_root/aleph_start

* ssh port: 22 or (on certain Ex-Libris-hosted servers) 10022:  needs to be open to the IP's of local and EL staff who need to ssh to the server.

• Article last edited: 10-Feb-2017