Can we please add the following rules mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21) all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday). -corby
Corby, You should be all set access-list internal_out extended permit tcp any host 140.221.7.4 object-group MUD-TCP object-group service MUD-TCP tcp description MCS MUD Ports port-object eq 7777 port-object eq 7779 port-object eq 7780 access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp -----Original Message----- From: Corby Schmitz [mailto:[email protected]] Sent: Tuesday, November 30, 2010 3:32 PM To: [email protected] Cc: Poetzel, Christopher J.; [email protected] Subject: Firewall rules needed for upcoming power outage Can we please add the following rules mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21) all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday). -corby
Can we add port 80 to these two rules ASAP? access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp Our FTP sites also service http requests. ---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055 ----- Original Message ----- From: "Christopher J. Poetzel" <[email protected]> To: "Corby Schmitz" <[email protected]>, [email protected] Cc: [email protected] Sent: Wednesday, December 1, 2010 10:39:06 AM Subject: RE: Firewall rules needed for upcoming power outage Corby, You should be all set access-list internal_out extended permit tcp any host 140.221.7.4 object-group MUD-TCP object-group service MUD-TCP tcp description MCS MUD Ports port-object eq 7777 port-object eq 7779 port-object eq 7780 access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp -----Original Message----- From: Corby Schmitz [mailto:[email protected]] Sent: Tuesday, November 30, 2010 3:32 PM To: [email protected] Cc: Poetzel, Christopher J.; [email protected] Subject: Firewall rules needed for upcoming power outage Can we please add the following rules mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21) all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday). -corby
Just got confirmation from Chris that this will happen tonight. If there is any push-back from the users, please direct it, and them, to me and I will take care of it. -- Corby On Dec 2, 2010, at 5:11 PM, Dan Olson wrote:
Can we add port 80 to these two rules ASAP?
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
Our FTP sites also service http requests.
---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055
----- Original Message ----- From: "Christopher J. Poetzel" <[email protected]> To: "Corby Schmitz" <[email protected]>, [email protected] Cc: [email protected] Sent: Wednesday, December 1, 2010 10:39:06 AM Subject: RE: Firewall rules needed for upcoming power outage
Corby, You should be all set
access-list internal_out extended permit tcp any host 140.221.7.4 object-group MUD-TCP
object-group service MUD-TCP tcp description MCS MUD Ports port-object eq 7777 port-object eq 7779 port-object eq 7780
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
-----Original Message----- From: Corby Schmitz [mailto:[email protected]] Sent: Tuesday, November 30, 2010 3:32 PM To: [email protected] Cc: Poetzel, Christopher J.; [email protected] Subject: Firewall rules needed for upcoming power outage
Can we please add the following rules
mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21)
all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday).
-corby
new rules are in and confirmed to work from my comcast cable modem. access-list internal_out line 13 extended permit tcp any host 140.221.15.24 eq www (hitcnt=4) 0x0c1e582d access-list internal_out line 14 extended permit tcp any host 140.221.15.23 eq www (hitcnt=892) 0x8a1cdf60 access-list internal_out line 15 extended permit tcp any host 140.221.15.23 range ftp-data ftp (hitcnt=990) 0x6564b516 access-list internal_out line 16 extended permit tcp any host 140.221.15.24 range ftp-data ftp (hitcnt=3) 0x431173 chris ________________________________________ From: Schmitz Corby [[email protected]] Sent: Thursday, December 02, 2010 5:53 PM To: Olson, Daniel E. Cc: Poetzel, Christopher J.; [email protected]; Corby Schmitz; [email protected] Subject: Re: Firewall rules needed for upcoming power outage Just got confirmation from Chris that this will happen tonight. If there is any push-back from the users, please direct it, and them, to me and I will take care of it. -- Corby On Dec 2, 2010, at 5:11 PM, Dan Olson wrote:
Can we add port 80 to these two rules ASAP?
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
Our FTP sites also service http requests.
---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055
----- Original Message ----- From: "Christopher J. Poetzel" <[email protected]> To: "Corby Schmitz" <[email protected]>, [email protected] Cc: [email protected] Sent: Wednesday, December 1, 2010 10:39:06 AM Subject: RE: Firewall rules needed for upcoming power outage
Corby, You should be all set
access-list internal_out extended permit tcp any host 140.221.7.4 object-group MUD-TCP
object-group service MUD-TCP tcp description MCS MUD Ports port-object eq 7777 port-object eq 7779 port-object eq 7780
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
-----Original Message----- From: Corby Schmitz [mailto:[email protected]] Sent: Tuesday, November 30, 2010 3:32 PM To: [email protected] Cc: Poetzel, Christopher J.; [email protected] Subject: Firewall rules needed for upcoming power outage
Can we please add the following rules
mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21)
all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday).
-corby
Thank you for taking care of that. It is greatly appreciated on the mcs side. Corby Schmitz Sent from my mobile office On Dec 2, 2010, at 18:25, "Poetzel, Christopher J." <[email protected]> wrote:
new rules are in and confirmed to work from my comcast cable modem.
access-list internal_out line 13 extended permit tcp any host 140.221.15.24 eq www (hitcnt=4) 0x0c1e582d access-list internal_out line 14 extended permit tcp any host 140.221.15.23 eq www (hitcnt=892) 0x8a1cdf60 access-list internal_out line 15 extended permit tcp any host 140.221.15.23 range ftp-data ftp (hitcnt=990) 0x6564b516 access-list internal_out line 16 extended permit tcp any host 140.221.15.24 range ftp-data ftp (hitcnt=3) 0x431173
chris ________________________________________ From: Schmitz Corby [[email protected]] Sent: Thursday, December 02, 2010 5:53 PM To: Olson, Daniel E. Cc: Poetzel, Christopher J.; [email protected]; Corby Schmitz; [email protected] Subject: Re: Firewall rules needed for upcoming power outage
Just got confirmation from Chris that this will happen tonight. If there is any push-back from the users, please direct it, and them, to me and I will take care of it.
-- Corby
On Dec 2, 2010, at 5:11 PM, Dan Olson wrote:
Can we add port 80 to these two rules ASAP?
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
Our FTP sites also service http requests.
---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055
----- Original Message ----- From: "Christopher J. Poetzel" <[email protected]> To: "Corby Schmitz" <[email protected]>, [email protected] Cc: [email protected] Sent: Wednesday, December 1, 2010 10:39:06 AM Subject: RE: Firewall rules needed for upcoming power outage
Corby, You should be all set
access-list internal_out extended permit tcp any host 140.221.7.4 object-group MUD-TCP
object-group service MUD-TCP tcp description MCS MUD Ports port-object eq 7777 port-object eq 7779 port-object eq 7780
access-list internal_out extended permit tcp any host 140.221.15.23 range ftp-data ftp access-list internal_out extended permit tcp any host 140.221.15.24 range ftp-data ftp
-----Original Message----- From: Corby Schmitz [mailto:[email protected]] Sent: Tuesday, November 30, 2010 3:32 PM To: [email protected] Cc: Poetzel, Christopher J.; [email protected] Subject: Firewall rules needed for upcoming power outage
Can we please add the following rules
mud rule for 140.221.7.4 (tcp/7777,7779,7780) ftp rule for 140.221.15.23, 140.221.15.24 (tcp/20-21)
all of these world accessible. since they are hitting the two load balancers that I have done paperwork on, can we just add them and I will deal with the final approval when all the rules are in place (probably friday).
-corby
participants (5)
-
Corby Schmitz -
Corby Schmitz -
Dan Olson -
Poetzel, Christopher J. -
Schmitz Corby