Link to home
Start Free TrialLog in
Avatar of KratosDefense
KratosDefenseFlag for United States of America

asked on

DNS replication

Im having trouble with one of my win2008 R2 DC replication DNS to other win2008 R2 DC accross a WAN. It might be possible that a firewall somewhere has a port blocked for the DNS/ AD replication. Which ports are critical for DNS to communicate to the other DC's (TCP or UDP?) and how can I test that those ports are open?
ASKER CERTIFIED SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of KratosDefense

ASKER

Ok so DNS port 53 UDP defiantly needs to be open for DNS to properly talk correct?
Can you sanity check and confirm that UDP ports don’t appear to be open to the server I need them to by examining the output of NMAP:
Initiating UDP Scan at 16:46
Scanning 10.200.200.91 [1000 ports]
Increasing send delay for 10.200.200.91 from 0 to 50 due to max_successful_tryno increase to 5
Increasing send delay for 10.200.200.91 from 50 to 100 due to max_successful_tryno increase to 6
Warning: 10.200.200.91 giving up on port because retransmission cap hit (6).
Increasing send delay for 10.200.200.91 from 100 to 200 due to 11 out of 11 dropped probes since last increase.
Increasing send delay for 10.200.200.91 from 200 to 400 due to 11 out of 11 dropped probes since last increase.
UDP Scan Timing: About 5.20% done; ETC: 16:56 (0:09:25 remaining)
Increasing send delay for 10.200.200.91 from 400 to 800 due to 11 out of 13 dropped probes since last increase.
UDP Scan Timing: About 7.90% done; ETC: 16:59 (0:11:51 remaining)
Increasing send delay for 10.200.200.91 from 800 to 1000 due to 11 out of 24 dropped probes since last increase.
UDP Scan Timing: About 10.14% done; ETC: 17:01 (0:13:26 remaining)
UDP Scan Timing: About 12.17% done; ETC: 17:03 (0:14:33 remaining)
UDP Scan Timing: About 17.57% done; ETC: 17:03 (0:13:41 remaining)
Discovered open port 51456/udp on 10.200.200.91
bad output. I reran just the port by itself. Seems to be open:


Starting Nmap 5.21 ( http://nmap.org ) at 2010-10-18 16:57 Eastern Daylight Time

Nmap scan report for 10.200.200.90

Host is up (0.094s latency).

PORT   STATE SERVICE

53/udp open  domain



Nmap done: 1 IP address (1 host up) scanned in 0.78 seconds
thxs