Blocking LDAP connections beginning March 14

Currently, the EECS LDAP servers (ldap.eecs.berkeley.edu) are accessible from any IP address in the world. In order to improve privacy for our users, we will begin blocking LDAP connections on ports 389 and 636 from any off-campus IP address beginning March 14, 2018 at 8am.

Those who wish to use the EECS LDAP servers from off-campus (for example, to use it for address book lookups in their mail program) can still access it by first running [the campus VPN](https://technology.berkeley.edu/services/accounts-and-access/remote-access-vpn).

This is not a general block on ports 389 / 636, but only applies to connections to ldap.eecs.berkeley.edu.

Please direct any questions to the IRIS helpdesk at help@eecs.berkeley.edu.

---

UPDATE

[2018-03-14 10:40:45 | Rob McNicholas]

The firewall blocks have been implemented. ldap.eecs.berkeley.edu is no longer reachable from hosts outside the UCB Networks. Please report any problems to help@eecs.berkeley.edu.