9.4. Local services on PNS

Local services run on the elements of the PNS Gateway System: on PNS, MS, and CF hosts. PNS hosts can provide the following services locally:

Warning

Local services can be accessed only by using IPv4. IPv6 access for local services is currently not supported.

  • ssh: It enables remote SSH access to the PNS host. It opens port TCP/22.

  • smtp: It enables the transport of SMTP (e-mail) traffic. This local service must be enabled if you want to use the native Postfix service of PNS to handle e-mail transfer (see Section 9.3, Postfix). It opens port TCP/25.

  • nagios-nrpe-server: It enables nagios-nrpe-server to query the PNS. This local service must be enabled if you want to monitor your PNS with Nagios (see Procedure 17.3, Monitoring PNS with Nagios. It opens port TCP/5666.

  • munin-node: It enables Munin to query the PNS. This local service must be enabled if you want to monitor your PNS with Munin (see Procedure 17.1, Monitoring PNS with Munin. It opens port TCP/4949.

  • ntp: It enables clients to synchronize their system clocks to the clock of the PNS host using NTP. This local service must be enabled if you want to use the native NTP service of PNS (see Section 9.2, NTP). It opens port UDP/123.

  • identreject: If it is enabled, PNS rejects every traffic arriving to the 113/TCP port.

  • dns: It enables clients to use the PNS host as a DNS server. This local service must be enabled if you want to use the native BIND9 service of PNS (see Section 9.1, BIND). It opens port UDP/53.

  • dns-zonetrans: It enables clients to use the PNS host as a DNS server. This local service must be enabled if you want to use the native BIND9 service of PNS and enable zone transfer (see Section 9.1, BIND). It opens port TCP/53.

  • MSgui: It enables administrators to connect to MS with MC, and manage the PNS Gateway System. It opens port TCP/1314.

  • MSengine: It enables communication between MS and the PNS hosts. This local service must be enabled if a host is managed from MS. It opens ports TCP/1311 and port TCP/1313.

  • MSagent: It enables communication between the PNS hosts and MS. This local service must be enabled on the MS host. It opens ports TCP/1310 and TCP/1312.

Note

PNS automatically enables the services required for the management of the host: MSagent for PNS hosts; MSgui and MSagent for MS hosts. It is recommended to allow SSH as well.

Local services can be managed on the Services tab of the Management Access MC component. For every local service, the Name, the used Port or ICMP type), the Protocol (TCP, UDP or ICMP), and the Target parameters are displayed. If the value for the Target parameter is ACCEPT for a local service, the service is permitted, if the vaue is REJECT it is denied. To enable access to a local service on a host, complete the following steps.

Previous Up Next
 Home