Blocked and Allowed Ports - Revision history

Sia at 18:29, 13 April 2026

2026-04-13T18:29:00Z

← Older revision		Revision as of 18:29, 13 April 2026
Line 22:		Line 22:
	== Region Mannheim ==		== Region Mannheim ==

	The ~~bwcloud~~ networks are accessible from the outside on '''all ports'''.		The bwCloud-OS networks are accessible from the outside on '''all ports'''.

	The following ports are blocked outbound (for all networks):		The following ports are blocked outbound (for all networks):

2026-04-02T10:51:17Z

Region Mannheim

← Older revision		Revision as of 10:51, 2 April 2026
Line 22:		Line 22:
	== Region Mannheim ==		== Region Mannheim ==

	The bwcloud networks are accessible from the outside on all ports.		The bwcloud networks are accessible from the outside on '''all ports'''.

	The following ports are blocked outbound (for all networks):		The following ports are blocked outbound (for all networks):

2026-04-02T10:50:26Z

2026-04-02T10:48:05Z

Region Mannheim

@@ Line 20: / Line 20: @@
 == Region Mannheim ==
-In the "well-known" ports range (i.e., ports below 1024), the following ports are open in server networks:
+The bwcloud networks are accessible from the outside on all ports.
+The following ports are blocked outbound (for all networks):
 {| class="wikitable"
-! Transport !! Port !! Protocol !! Description !! Blocking
+! Transport !! Port !! Description
 |-
-| TCP || 9075 || nx-os || Cisco Nexus || inbound
+| UDP, TCP || 128 || Reserved / GSS X License
 |-
-| UDP || 11211 || memcached || Memcached || inbound
+| TCP || 129-139 || NetBIOS / RPC
 |-
-| TCP || 27017 || MongoDB || MongoDB || inbound
+| UDP, TCP || 445 || SMB / Microsoft-DS
 |-
-| UDP || 32100 || IoT || IoT || outbound
+| UDP || 11211 || Memcached
 |-
-| UDP || 32414 || open-SSDP || Plex Media Servers || inbound
+| UDP || 32100 || IoT
 |}

2026-03-31T12:36:02Z

Region Ulm

← Older revision		Revision as of 12:36, 31 March 2026
Line 170:		Line 170:
	\|-		\|-
	\|-		\|-
	\| TCP \|\| 53 \|\| SMTP, with explicit allow list		\| TCP \|\| 25 \|\| SMTP, with explicit allow list
	\|-		\|-
	\| TCP \|\| 110 \|\| POP		\| TCP \|\| 110 \|\| POP

2026-03-31T12:35:27Z

Region Ulm

← Older revision		Revision as of 12:35, 31 March 2026
Line 169:		Line 169:
	\| TCP, UDP \|\| 49664 - 49670 \|\| MS-RPC, allow incoming only established		\| TCP, UDP \|\| 49664 - 49670 \|\| MS-RPC, allow incoming only established
	\|-		\|-
			\|-
			\| TCP \|\| 53 \|\| SMTP, with explicit allow list
	\|-		\|-
	\| TCP \|\| 110 \|\| POP		\| TCP \|\| 110 \|\| POP
			\|-
			\| TCP \|\| 389 \|\| LDAP, with explicit allow list
	\|-		\|-
	\| TCP \|\| 873 \|\| rsync - maybe make a Server ACL like FTP		\| TCP \|\| 873 \|\| rsync - maybe make a Server ACL like FTP
Line 192:		Line 196:
	\| TCP \|\| 27017 \|\| MongoDB		\| TCP \|\| 27017 \|\| MongoDB
	\|-		\|-
			\|-
			\| UDP \|\| 53 \|\| DNS, with explicit allow list
			\|-
			\| UDP \|\| 123 \|\| NTP, with explicit allow list
	\|-		\|-
	\| UDP \|\| 177 \|\| XDMCP, X Display Manager ...		\| UDP \|\| 177 \|\| XDMCP, X Display Manager ...
Line 200:		Line 208:
	\|-		\|-
	\| UDP \|\| 3283 \|\| Apple Remote Desktop		\| UDP \|\| 3283 \|\| Apple Remote Desktop
			\|-
			\| UDP \|\| 3478 \|\| STUN, with explicit allow list
	\|-		\|-
	\| UDP \|\| 3702 \|\| WS-Discovery		\| UDP \|\| 3702 \|\| WS-Discovery

2026-03-31T12:22:27Z

Region Ulm

← Older revision		Revision as of 12:22, 31 March 2026
Line 125:		Line 125:
	\| TCP, UDP \|\| 137 - 139 \|\| SMB		\| TCP, UDP \|\| 137 - 139 \|\| SMB
	\|-		\|-
	\| TCP, UDP \|\| 143 \|\| IMAP, with allow list		\| TCP, UDP \|\| 143 \|\| IMAP, with explicit allow list
	\|-		\|-
	\| TCP, UDP \|\| 161 - 162 \|\| SNMP		\| TCP, UDP \|\| 161 - 162 \|\| SNMP
Line 143:		Line 143:
	\| TCP, UDP \|\| 631 \|\| cups		\| TCP, UDP \|\| 631 \|\| cups
	\|-		\|-
	\| TCP, UDP \|\| 993 \|\| IMAP, with allow list		\| TCP, UDP \|\| 993 \|\| IMAP, with explicit allow list
	\|-		\|-
	\| TCP, UDP \|\| 1900 \|\| SSDP		\| TCP, UDP \|\| 1900 \|\| SSDP
Line 160:		Line 160:
	\|-		\|-
	\| TCP, UDP \|\| 6443 \|\| Kubernetes		\| TCP, UDP \|\| 6443 \|\| Kubernetes
			\|-
			\| TCP, UDP \|\| 9000 - 10999 \|\| 3CX RTP, with explicit allow list
	\|-		\|-
	\| TCP, UDP \|\| 9100 \|\| raw printer queues		\| TCP, UDP \|\| 9100 \|\| raw printer queues

2026-03-31T12:17:40Z

Region Ulm

2026-03-31T12:13:54Z

← Older revision		Revision as of 12:13, 31 March 2026
Line 10:		Line 10:

	It may also happen that seemingly outbound connections from the instance to certain services do not work. This occurs whenever the external server providing the service tries to establish a return connection to the instance, which is often difficult for the user to verify.		It may also happen that seemingly outbound connections from the instance to certain services do not work. This occurs whenever the external server providing the service tries to establish a return connection to the instance, which is often difficult for the user to verify.

			== Region Freiburg ==
			TODO: add

			{\| class="wikitable"
			! Transport !! Port !! Protocol !! Description !! Blocking
			\|-
			\|-

	== Region Mannheim ==		== Region Mannheim ==

2026-03-31T12:08:13Z

Region Ulm

← Older revision		Revision as of 12:08, 31 March 2026
Line 96:		Line 96:
	\|}		\|}
	== Region Ulm ==		== Region Ulm ==
	In the bwCloud-OS Region Ulm, the following ports are blocked by the Uni border firewall:		In the bwCloud-OS Region Ulm the following ports are blocked by the Uni border firewall:

	{\| class="wikitable"		{\| class="wikitable"
	! Transport !! Port Range !! Description / Reason		! Transport !! Port Range !! Description / Reason