Solved

Ports required to allow access through DMZ zone and MMC Plug - ins

Posted on 2006-11-29
5
446 Views
Last Modified: 2013-11-18
Hi,

I need to know what ports to open up on the firewall to allow access to the following:

1. Active Directory for our FTP Server sitting in the DMZ to communicate with the domain controller
2. Port to open for a windows xp plug in MMC for IIS6 to communicate to windows 2003 server sitting in the DMZ
3.  What MMC is required to be able to remotely restart services on a windows 2003 server, using a windows xp machine on another network. (what ports? same as the port in question 2?)

Thanks

Julia
0
Comment
Question by:Juliafrazer
  • 2
5 Comments
 
LVL 4

Accepted Solution

by:
Drizzt420 earned 500 total points
Comment Utility
53 (TCP, UDP) - Domain Name System (DNS).
88 (TCP, UDP) - Kerberos authentication.  
135 (TCP) - EndPointMapper.
389 (TCP, UDP) - Lightweight Directory Access Protocol (LDAP).
445 (TCP) - Server message block (SMB) for Netlogon, LDAP conversion, and Microsoft Distributed File System (DFS) discovery.
3268 (TCP) - LDAP to global catalog servers.


Microsoft management consoles use RPC to connect to and manage a machine. This requires port 139, which is basically NetBIOS over TCP/IP.
0
 

Author Comment

by:Juliafrazer
Comment Utility
very helpful thanks,

but any clues on point 3?
0
 
LVL 4

Expert Comment

by:Drizzt420
Comment Utility
You would be better off using remote desktop to mess with services.

To connect to a remote PC, go to Start, Run, type MMC
Hit enter and go to File, Add Remove Snap-in, and add the Services snap-in
It will ask you if you want to run this console for the local machine or connect to a remote one, pick remote and follow the "instructions"

It could prove difficult to do if you are on a totally seperate network though, which is why I would use Remote Desktop:
On Server: right click My Computer, Properties, Remote Tab, check " Allow Users"
Add an account to allowed users
Forward port 3389 to the server, and set up a RDP connection on the XP workstation using the user accounts credentials that you allowed access for on the Server..
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Resolve DNS query failed errors for Exchange
The purpose of this video is to demonstrate how to set up the WordPress backend so that each page automatically generates a Mailchimp signup form in the sidebar. This will be demonstrated using a Windows 8 PC. Tools Used are Photoshop, Awesome…
This video discusses moving either the default database or any database to a new volume.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now