OK google'd the heck out of resources I could find on this issue.
All I came across are:
Make sure you create Program exceptions for:
Make sure you create Port exception for:
26675 TCP for 169.254.0.0/255.255.255.255
I did this, yet people still can't sync. When I checked the firewall logs (pfirewall.log) I saw that ports:
5679 UDP, 52 TCP, 52 UDP, 990 UDP were all "dropping" for 169.254 range. So I manually added them in the port exception list as well...
STILL WONT SYNC! GRRRRRRRRRRRRRRR
Can someone help me here? B/c of this stupid issue, I had to create a seperate inheritance blocked OU and drop my pda users there, re-linking non firewall gpos... LAME!