From adbf11520df29a78044fa5b1f933f723188aad45 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Tue, 9 Apr 2024 08:25:41 +0000 Subject: [PATCH] added ports for dc02 promotion --- ansible/vars/standard.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml index 37ed766..08bc96a 100644 --- a/ansible/vars/standard.yml +++ b/ansible/vars/standard.yml @@ -28,6 +28,7 @@ remote_group_rules: - { direction: "ingress", protocol: "tcp", port_min: 636, port_max: 636, group: "domain_controller", remote_group: "domain_member", comment: "LDAPS"} - { direction: "ingress", protocol: "tcp", port_min: 3268, port_max: 3269, group: "domain_controller", remote_group: "domain_member", comment: "Global catalog"} - { direction: "ingress", protocol: "udp", port_min: 123, port_max: 123, group: "domain_controller", remote_group: "domain_member", comment: "W32Time"} + - { direction: "ingress", protocol: "tcp", port_min: 49152, port_max: 65535, group: "domain_controller", remote_group: "domain_controller", comment: "FRS RPC"} # needed for dc02 promotion # File servers - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_group: "domain_member", comment: "SMB"} # could be restricted # WSUS servers