--- /tmp/2	2009-06-27 16:14:23.000000000 +0100
+++ /etc/sysconfig/iptables	2009-06-27 16:13:58.000000000 +0100
@@ -16,2 +16,5 @@
 #A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
+#2a cl.cam.ac.uk: this is an LDAP server
+-A RH-Firewall-1-INPUT -p udp -m udp --dport 389 -j ACCEPT
+-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 389 -j ACCEPT
 -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
