According to "official" gLite sources a CREAM CE node needs to have incoming port 8443 and 2811 open to the general internet, and 2170 etc. to the site BDII. But from I think that the GridPP Nagios accesses directly the CE BDII, so because of that and in general, should I attempt to get port 2170 to be open to the general internet too? Also, I was reading some other non-GridPP web page that says that BDII, UI, Torque and WN node types don't need a host certificate, but the UI here has one, any suggestions as to what could be for.