firewall ports to be opened in between client and master?

[Jason Amato]

I have a firewall in between a number of client servers and the
puppetmaster.
What ports does my firewall guy need to open up in order for push
(puppetrun) and pulls to work and in which direction (master -> client
or vice versa), please?

I see ports:
1110 client open up on the client during a push
8139 runs with the puppetd daemon.
8140 runs with puppetmasterd.

Thanks in advance!

Jason Amato

[korymatu]

I opened up 8140/tcp from the clients to the puppetmaster and haven't
had any issues pushing configurations and filebucketing. The clients
shouldn't need anything specific opened; the usual 'established'
traffic - which will already be allowed.