hi guys,
with IPA replication on a "publicly" exposed network what IPA(and related) services/ports, if any, can be closed? What is that bare minimum that need to stay opened so replication cannot be harmed?
No IPA clients in traditional sense, except for DNS, on that "public" net.
many thanks, L.