We have set up Active Directory Federation Services on our Domain Controller (WS2008r2). Our network sits behind a sonicwall. We have set up NAT in the sonicwall to pass all TCP/UDP traffic on port 389 to the DC. We can ldap_connect to the ADFS from php when we use the inernal 10.0.0.* address to perform the connection and it works, but if we try from outside of the building which has to go through the sonicwall we always get connection refused.
Has anyone run into this? It appears the Sonicwall is stopping the connection even though it should be passing it through.