Traffic Filters on the Campus Network

Traffic on the campus network is filtered at selected points to block certain traffic:

• Traffic Filters at the University's Internet Border describes the filters in place at the OIT-managed borders between the campus network and the Internet. These filters affect traffic as it crosses in either direction between the Internet and campus. They do not affect traffic that remains within the campus network.

• OIT Filters mDNS (Multicast Domain Name Service) describes filters on mDNS traffic. We filter the traffic as it tries to pass through the core of the campus network. We also filter the traffic as it tries to enter any of the wireless services provided by OIT. These filters affects traffic within the campus network.

• OIT Filters Teredo Multicast Traffic on Wireless Networks describes a filter on Teredo multicast traffic on the wireless networks operated by OIT.

• OIT Filters Dropbox Broadcast Traffic on Wireless Networks describes a filter on broadcast traffic sent by the Dropbox application. This filter does not interfere with the ability to use the Dropbox application. The filter applies to the wireless networks operated by OIT.

• OIT Filters NetBIOS over TCP/IP Broadcast Traffic on Wireless Networks describes a filter on some NetBIOS over TCP/IP traffic. Only the broadcast and multicast traffic is filtered; the unicast traffic is not filtered. The filter applies to the wireless networks operated by OIT.

• OIT Filters LLMNR (Link Local Multicast Name Resolution) Traffic describes a filter on the wireless networks operated by OIT.

• OIT Filters SSDP (Simple Service Discovery Protocol) Traffic describes a filter on the wireless networks operated by OIT.

• OIT Filters WS-Discovery (Web Services Dynamic Discovery) Traffic describes a filter on the wireless networks operated by OIT.

• OIT Filters CUPS (Common UNIX Printing System) Broadcast Traffic on Wireless Networks describes a filter on some CUPS traffic. Only the broadcast traffic is filtered; the unicast traffic is not filtered. The filter applies to the wireless networks operated by OIT.

• OIT Filters SNMP (Simple Network Management Protocol) Broadcast Traffic describes a filter on the wireless networks operated by OIT. Only the broadcast traffic is filtered; the unicast traffic is not filtered.

• OIT Filters Broadcast and Multicast ICMP Echo Request Traffic describes a filter on the wireless networks operated by OIT.

• OIT Filters IPv6 on Wireless Networks describes a filter on IPv6 traffic on the wireless networks operated by OIT.

• OIT Filters AppleTalk on Wireless Networks describes a filter on the wireless networks operated by OIT. AppleTalk is an obsolete protocol.

• At each IP router operated by OIT, we filter traffic arriving at each of the router's network interfaces. We block incoming traffic coming from IPv4 source addresses other than that which are appropriate for the IP subnet to which that router interface is attached. This filter affects traffic as it tries to leave a subnet, for example.

• Some departments or individuals install firewalls and place some of their devices behind these firewalls. These firewalls filter selected traffic. As such firewalls are governed by individual departments, OIT cannot document the filters they implement, or which parts of the portions of the campus network behind these firewalls. Such policies are governed by the departments or individuals responsible for these firewalls.

• At wireless access points operated by OIT, we attempt to filter the disruptive DHCP and BootP traffic sent by those wireless clients acting as rogue DHCP servers, rogue BootP servers, or rogue BootP Relay Agents. Only the disruptive DHCP and BootP traffic is filtered; the same wireless client's normal DHCP, BootP, and other traffic is not filtered.