Domain Firewall ports

Can someone please check my work.  
I am moving things behind a firewall, and want to make sure I get this right so there are no outages.  The setup is like this;

                                                     /---LinuxDNS
ServerDC1--------(firewall)---------o----ServerDC2
                                                     \----Clients

*Firewall allows all outgoing
**50000, 50001, and 50002 are forced for AD rep and FRS rep via the registry
So Rule1 on the firewall should be;
allow ports ServerDC1 <=> ServerDC2;   88,135,137,138,139,389,445,636,3268,3269,icmp,50000,50001,50002
and Rule2
Allow ports ServerDC1<=> local network;   88, 389, 3268, icmp


I would love to hear some feed back on this.

Refferances;
Domains and trusts ports http://support.microsoft.com/kb/179442/
How to force rpc ports http://support.microsoft.com/kb/154596/
FRS port forcing http://support.microsoft.com/kb/319553/
RPC Port force & AD replication http://support.microsoft.com/kb/224196/
Start Free Trial