Appendix - Detailed network firewall rules

To permit anticipated traffic to/from the Semaphore implementation, the following sections detail the recommended firewall configuration. In the case where Semaphore components are partitioned these instructions also indicate (if applicable) which Semaphore component requires the access indicated.

The information given in the following sections is grouped as follows:

• “Incoming” refers to connections other machines are making to the given machine.
• “Outgoing” refers to connections the given machine makes to other machines.

Semaphore Server firewall rules

Incoming

• Port 5058 from classification clients - Classification Server access if classification clients are not on the same physical server
• Port 5059 from classification testers - Access to the Classification Server Analysis Tool (for model developers or those responsible for testing classification)
• Port 5080 from Studio clients - Access to the Studio interface
• Port 8983 from search interface - Semantic Enhancement Server interface

Studio client firewall rules

Outgoing

• Access to Semaphore server (Studio) port 5080 - Access to Studio

Classification Server/Rulebase Editors client firewall rules

Outgoing

• Access to Semaphore server (Classification Server) port 5059 - Access to the Classification Analysis Tool (test interface for Classification Server)
• Access to Semaphore server (Classification Server) port 5058 - Access to the (RAW) classification interface which is required for any integration requiring classification services

Semantic Enhancement Server client firewall rules

Outgoing

• Access to Semaphore server (Semantic Enhancement Server) port 8983 - Access to the Semantic Enhancement Server API