How does the University firewall work?

• AU operates a default deny firewall. This means everything is blocked except the following ports which are open to everyone, but with limited throughput:
  

  21	FTP
  22	SSH
  23	Telnet
  80	HTTP
  110	POP email
  143	IMAP email
  443	HTTPS

• Users can register to have up to 20 firewall ports or 10 ranges of 10 consecutive ports opened for them ( How do I do that? )
• The firewall is updated daily, Monday to Friday mornings. Therefore requests for ports to be open will not be activated immediately but must wait for this update.
• The following ports will not be unblocked, even if a firewall hole has been requested (ranges are in bold):

  Protocol	Ports	Protocol	Ports
  TCP	25	TCP	1215
  TCP	37	UDP	1433-1434
  UDP	37	TCP	1433-1434
  UDP	67	UDP	1948
  TCP	69	TCP	2234
  UDP	69	TCP	2120-2129
  TCP	80	TCP	3128
  TCP	119	UDP	3389
  UDP	135	TCP	3531
  TCP	135	UDP	3531
  UDP	137-139	TCP	4662
  TCP	137-139	TCP	4242
  TCP	161-162	UDP	4672
  UDP	161-162	TCP	4661-4665
  TCP	201	UDP	4665
  TCP	202	TCP	5000
  TCP	211	UDP	5000
  TCP	212	UDP	6346
  TCP	299	TCP	6346-6350
  TCP	389	UDP	6346-6350
  UDP	389	TCP	6699
  TCP	401	TCP	6881-6889
  TCP	402	TCP	8080
  UDP	445	TCP	12144
  TCP	445	TCP	16881-16889
  TCP	593	UDP	41170
  TCP	1001	TCP	65010
  TCP	1214

• If you have a valid academic or work related reason for unblocking one of the ports listed above you should email Information Services detailing this. Students will need to have a supporting email from their tutor or Head of Department.
• All open ports are monitored for Peer to Peer activity and, if detected, the computer is blocked automatically for half an hour and all firewall holes will stop working during this time. You must remove any Peer to Peer software from your computer for your firewall holes to work properly.

[ top of page ]