According to "official" gLite sources a CREAM CE node needs to
have incoming port 8443 and 2811 open to the general internet,
and 2170 etc. to the site BDII.
But from I think that the GridPP Nagios accesses directly the CE
BDII, so because of that and in general, should I attempt to get
port 2170 to be open to the general internet too?
Also, I was reading some other non-GridPP web page that says
that BDII, UI, Torque and WN node types don't need a host
certificate, but the UI here has one, any suggestions as to what
could be for.