Ports 389 and 11371 for PGP

[lhuegele]

We received a firewall change request today asking us to open outbound ports 389 and 11371 for the public key server access they need with PGP.

Can anyone here think of a reason why we should NOT open these outbound ports?

As a second question, most public key servers say to use port 389 OR port 11371. Any reasons for this other than 389 is the LDAP port?

Thanks in advance!

 

[tfg13]

I would think that only opening 11371 would work. I'm not sure you would want LDAP open, unless the originator of a message needs to query LDAP for an address. Seems that if there is already communications with someone outside your network, they should already have the address. I would be cautious with opening 389. Just one more hole in the network.

 

[lhuegele]

That's my feeling as well, even though it will only be an outbound port and not an inbound port. Thanks for your reply!