Link to home
Start Free TrialLog in
Avatar of alex-2010
alex-2010

asked on

rpc port 49158

I am trying to do a small test for restricting rpc to use static port. Using the Registry I did static port assignment for NTDS to be 49155 in the domain controller. I have two virtual machines, the dc is running windows 2008 r2 with ip 10.2.2.2, and a member server running windows 2003 ip 10.8.8.8. using the dc windows firewall i created new rpc rule to use port 49155. from the firewall log bellow I have two questions:
1- why win2003 is trying to connect to 10.2.2.2 with port 49158? And what is the affect of that?
2- for NTDS static port assignment , do I have to do it for all the company dc’s?
 Thanx
firewall log
ALLOW UDP 10.8.8.8 10.2.2.2 1026 53 0 -- RECEIVE
ALLOW TCP 10.8.8.8 10.2.2.2 1058 135 0 - 0 0 0 - - - RECEIVE
DROP TCP 10.8.8.8 10.2.2.2 1059 49158 48 S 1388427278 0 64240 - - - RECEIVE
DROP TCP 10.8.8.8 10.2.2.2 1059 49158 48 S 1388427278 0 64240 - - - RECEIVE
ALLOW UDP 10.8.8.8 10.255.255.255 138 138 0 -- RECEIVE
ALLOW UDP 10.8.8.8 10.2.2.2 1060 88 0 -- RECEIVE
ALLOW TCP 10.8.8.8 10.2.2.2 1061 88 0 - 0 0 0 - - - RECEIVE
ALLOW UDP 10.8.8.8 10.2.2.2 1062 88 0 -- RECEIVE
DROP TCP 10.8.8.8 10.2.2.2 1059 49158 48 S 1388427278  - - RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
ALLOW ICMP 10.8.8.8 10.2.2.2 - - 0 - - - - 8 0 - RECEIVE
DROP UDP 10.8.8.8 10.2.2.2 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.2.2.2 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.2.2.2 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
DROP UDP 10.8.8.8 10.255.255.255 137 137 78 -- RECEIVE
ALLOW TCP 10.8.8.8 10.2.2.2 1064 49155 0 - 0 0 0 - - - RECEIVE
ASKER CERTIFIED SOLUTION
Avatar of Adam Brown
Adam Brown
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial