Would opening these ports cause any issues?

[Sonic007]

I would need the following ports opening:

80 TCP, 22 TCP, 443 TCP, 19788 UDP/TCP, 8099 UDP/TCP, 53 UDP/TCP

 

They would only need outgoing, not incoming.

 

 

Would this cause any issues or security concerns?

 

 

Thankyou.

[mavhc]

Why are they currently not open is the question, or maybe they are. If your security relies on not letting pupils directly on the internet, then 80 and 443, and probably 53 would be bad.

 

80 is http, 443 is https

22 is ssh

53 is dns

19788 is "Mesh link establishment"

 

Who's asking you to open these outgoing ports?

 

By default in a network all ports are usually open for outgoing connections. They'd be closed for security reasons, like forcing all pupils to go via a proxy

[Sonic007]

Thankyou Mavhc for your reply.

 

You are right that some are already open. I just wanted to check the others.

 

The reason Im asking is Im trying to get a RaspberryPi working on our network with FlightRadar24.... A little project we are doing to track flights.

 

It has been not wanting to connect properly so I wondered if it was a ports issue and these were the ones reported as needing outgoing when behind a firewall.

[mavhc]

Does it work at home? Probably a proxy issue

[Sonic007]

Will try it at home later. Proxy has been set on the Pi.

[chazzy2501]

if you're using the RM internet you'll need to use the nossl proxy. (just in case)

[Boredguy]

It is most likely a web filter that is causing the issue rather than a port issue on the firewall.

As Chazzy2501 said, if you have a option on with your filtering provider to use a NonSSL proxy, that might be best, otherwise you will need to work out how to get your MitM certificate installed onto the Pi.

[DGardiner]

We have everything outbound blocked no sneaky phone home or vpn stuff

 

if you want to leave the network its via the proxies, unless its an exception that ive added ofc

[Sonic007]

if you're using the RM internet you'll need to use the nossl proxy. (just in case)

 

 

I can get on the net fine from the Pi so it connects fine and can ssh into it too via another machine.

[mavhc]

Questions are: is the flightradar thing using the proxy, is the website allowed on the proxy, if you're tls intercepting, is the flight radar thing complaining?