Difference between revisions of "External access"

From Netsoc Wiki
Jump to: navigation, search
m (moved External access on cube to External access: Some IPs are now on physical hosts which are not cube)
(No difference)

Revision as of 05:41, 7 January 2014

While the many services on cube are partitioned into several containers with their own IP addresses, College only allocates cube a single externally-routable IP address, currently 134.226.83.27, the IP address of the login container, cube.netsoc.tcd.ie. By using the login container as the externally-routable host, we ensure that users can SSH to cube transparently without having to concern themselves with our multiple IP setup.

The following tables summarizes the external Internet access allowed to and from cube by the College firewall:

IP address Host Inbound Outbound
134.226.83.19 services.cubeirc None None
134.226.83.20 admin None None
134.226.83.21 cubemail 80, 443, 143, 110, 993, 587, 995 80, 443, 143, 110, 993, 587, 995
134.226.83.22 cubestorage None None
134.226.83.23 cubewww None None
134.226.83.24 userweb 80, 443 80, 443
134.226.83.25 cubeirc 6667, 143 6667, 143
134.226.83.27 cube 22, 80, 443, 25, 113, 993, 6667, 53, 33434 Unfiltered
134.226.83.28 cuberoot None None
134.226.83.31 ldap None None

Note that these are simply the ports which we can open on our own firewall without College intervention. This table does not reflect our own firewall configuration, and therefore does not indicate which ports are actually open at any particular time (for example, College doesn't filter outbound Internet access on 134.226.83.27, but we do).