-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 These are for more than just systems net. See inline for comments. - -corby On Mar 18, 2011, at 2:54 PM, Dan Olson wrote:
I looked through the systems net acls, and came across a few questionable ones - Please review and let me know if these are in use.
It does now, so remove these.
This IP points at a switch permit tcp any host 140.221.13.65 eq 1720 !ARG#43378 ! permit udp any host 140.221.13.65 eq 1719 !ARG#43378 ! permit tcp any host 140.221.13.65 range 5500 5600 !ARG#43378 ! permit udp any host 140.221.13.65 range 2300 2500 !ARG#43378 !
Yes, but its patched. it is up to linda if this can be removed for now).
This host is ALSO in the scanner log #temporary rules for ps.mcs.anl.gov permit tcp any host 140.221.8.252 eq 80 permit tcp any host 140.221.8.252 eq 443
If there is nothing there, then they are old and can be removed.
This ip is not in dns permit tcp any host 140.221.8.99 eq 80 !ARG#11329 ! permit tcp any host 140.221.8.99 eq 443 !ARG#11329 !
This was a demo that leveraged gridftp. It was dismantled so they can go away.
Maybe we can delete these? #temporary rules for SC09 to elephant permit tcp host 192.12.137.4 host 140.221.8.19 range 50000 50100 permit tcp host 192.12.137.5 host 140.221.8.19 range 50000 50100 permit tcp host 192.12.137.129 host 140.221.8.19 range 50000 50100 permit tcp host 128.55.80.35 host 140.221.8.19 range 50000 50100 permit tcp host 128.55.80.36 host 140.221.8.19 range 50000 50100 permit tcp host 140.221.83.11 host 140.221.8.19 range 50000 50100 permit tcp host 140.221.83.12 host 140.221.8.19 range 50000 50100
They can be cleaned up then.
These are all behind the LWFW with other conduits #Lists for all MCS owned list servers on single lists server with vhosts permit tcp any host 140.221.8.38 eq 80 !ARG#8202 !! !lists.accessgrid.org permit tcp any host 140.221.8.39 eq 80 !ARG#8203 !! !lists.cosmea.mcs.anl.gov # permit tcp any host 140.221.8.40 eq 80 !ARG#8204 !! !lists.bgl.mcs.anl.gov permit tcp any host 140.221.8.41 eq 80 !ARG#8205 !! !lists.cogkit.org permit tcp any host 140.221.8.120 eq 80 !ARG#38877 !! !workshops.alcf.anl.gov permit tcp any host 140.221.8.116 eq 80 !ARG#38266 !! scienceclouds.org permit tcp any host 140.221.8.45 eq 80 !ARG#8207 !! !lists.i2u2.org permit tcp any host 140.221.8.46 eq 80 !ARG#8208 !! !lists.kbt.mcs.anl.gov permit tcp any host 140.221.8.48 eq 80 !ARG#8209 !! !lists.nmpdr.org permit tcp any host 140.221.8.49 eq 80 !ARG#8210 !! !lists.ogce.org permit tcp any host 140.221.8.50 eq 80 !ARG#8211 !! !lists.theseed.org permit tcp any host 140.221.8.115 eq 80 !ARG#37486 !!lists.icis.anl.gov permit tcp any host 140.221.8.38 eq 443 !ARG#8202 !! !lists.accessgrid.org permit tcp any host 140.221.8.39 eq 443 !ARG#8203 !! !lists.cosmea.mcs.anl.gov # permit tcp any host 140.221.8.40 eq 443 !ARG#8204 !! !lists.bgl.mcs.anl.gov permit tcp any host 140.221.8.41 eq 443 !ARG#8205 !! !lists.cogkit.org permit tcp any host 140.221.8.45 eq 443 !ARG#8207 !! !lists.i2u2.org permit tcp any host 140.221.8.46 eq 443 !ARG#8208 !! !lists.kbt.mcs.anl.gov permit tcp any host 140.221.8.48 eq 443 !ARG#8209 !! !lists.nmpdr.org permit tcp any host 140.221.8.49 eq 443 !ARG#8210 !! !lists.ogce.org permit tcp any host 140.221.8.50 eq 443 !ARG#8211 !! !lists.theseed.org permit tcp any host 140.221.8.115 eq 443 !ARG#37486 !!lists.icis.anl.gov
#START lists.igsb.org Permits permit tcp any host 140.221.9.246 eq 80 !ARG#11081 !! permit tcp any host 140.221.9.246 eq 443 !ARG#11081 !! #END lists.igsb.org permits #START lists.cels.anl.gov Permits permit tcp any host 140.221.8.34 eq 80 !ARG#8200 !! permit tcp any host 140.221.8.34 eq 443 !ARG#8200 !! #END lists.cels.anl.gov
no idea
# permit tcp any host 140.221.8.22 eq 25 ! ARG#9789 ! mailbouncer
no idea
permit tcp any host 140.221.9.72 eq 22 ! ARG#489 ! shakey # breeze.mcs.anl.gov tcp 7777 permit tcp any host 140.221.9.85 eq 7777 !ARG#8001 !! over.mcs.anl.gov mud permit tcp any host 140.221.9.85 eq 7779 !ARG#8001 !! over.mcs.anl.gov mud permit tcp any host 140.221.9.85 eq 7780 !ARG#8001 !! over.mcs.anl.gov mud
this points at proxy, but wasn't this stuff the mud before?
permit tcp any host 140.221.8.20 eq 7777 !ARG# 65483 ! permit tcp any host 140.221.8.20 eq 7779 !ARG# 65483 ! permit tcp any host 140.221.8.20 eq 7780 !ARG# 65483 !
Host not in DNS, remove.
hume? permit tcp any host 140.221.9.8 eq 8000 !ARG#866 permit tcp any host 140.221.9.8 eq 8002 !ARG#866 permit tcp any host 140.221.9.8 eq 8004 !ARG#866 permit tcp any host 140.221.9.8 eq 8006 !ARG#866
Not sure what the state of these is
REVIEW THESE**** #login hosts permit tcp any host 140.221.8.4 eq 22 ! ARG#489 ! terra permit tcp any host 140.221.8.8 eq 22 ! ARG#489 ! pamby permit tcp any host 140.221.8.11 eq 22 ! ARG#489 ! harley.mcs.anl.gov permit tcp any host 140.221.9.199 eq 22 ! ARG#489 ! permit tcp any host 140.221.9.200 eq 22 ! ARG#489 ! permit tcp any host 140.221.9.205 eq 22 ! ARG#489 ! permit tcp any host 140.221.9.206 eq 22 ! ARG#489 ! *****
The 130.202.118 addresses represent the domain controllers throughout the lab. I suspect that 8.12 was something more interesting in the past.
Fuzzy? # winunix.mcs.anl.gov (140.221.8.12) aka fuzzy permit tcp host 130.202.118.8 host 140.221.8.12 eq 137 permit tcp host 130.202.118.10 host 140.221.8.12 eq 137 permit tcp host 130.202.118.20 host 140.221.8.12 eq 137 permit tcp host 130.202.118.30 host 140.221.8.12 eq 137 permit tcp host 130.202.118.8 host 140.221.8.12 eq 139 permit tcp host 130.202.118.10 host 140.221.8.12 eq 139 permit tcp host 130.202.118.20 host 140.221.8.12 eq 139 permit tcp host 130.202.118.30 host 140.221.8.12 eq 139 permit tcp host 130.202.118.8 host 140.221.8.12 eq 445 permit tcp host 130.202.118.10 host 140.221.8.12 eq 445 permit tcp host 130.202.118.20 host 140.221.8.12 eq 445 permit tcp host 130.202.118.30 host 140.221.8.12 eq 445
---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055
-----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) iD8DBQFNg7pfQhpwH3ALVFERAnB5AJ0d79Q4Fyp7J2IPg7cngQMzkWRZJQCfcuT5 Ck5MXjPIBV+VSjUJ3A8dibM= =I0Uf -----END PGP SIGNATURE-----