MirrorACLRequirements

Introduction

This documents what it takes to run a full mirror, in terms of inbound ACLs.

Port	Protocol	Purpose
80	TCP	Web server
443	TCP	Web server
53	UDP	DNS, for serving mirror specific zones
n/a	icmp6	At /minimum/ "Packet Too Big" required (icmp6 type 2)
22 (or other)	tcp	ssh (for you to log in and manage)