[fw-wiz] Re: firewall-wizards digest, Vol 1 #1322 - 1 msg

From: Tim Chettle (tim.chettle_at_orange.net)
Date: 06/07/04

  • Next message: firewalladmin_at_bellsouth.net: "Re: [fw-wiz] Putting MS servers behind firewalls" 
    To: <firewall-wizards@honor.icsalabs.com>
Date: Mon, 7 Jun 2004 18:32:05 +0100

    Most of the protocols you mention are RPC based connections.
    The client connects the rpc listener and then negotiates a fresh set of
    dynamic ports to communicate upon,
    I dont belive that the Pix or Iptables can handle that typ eof dynamic
    connection.

    However the point i was going to make was that rather than open up that high
    number of connections, if you are using exchange 2003 and outlook 2003 you
    can replicate over https and if you deploy a sharepoint services on the box
    again you can browse using https

    ----- Original Message -----
    From: <firewall-wizards-request@honor.icsalabs.com>
    To: <firewall-wizards@honor.icsalabs.com>
    Sent: Monday, June 07, 2004 5:00 PM
    Subject: firewall-wizards digest, Vol 1 #1322 - 1 msg

    > Send firewall-wizards mailing list submissions to
    > firewall-wizards@honor.icsalabs.com
    >
    > To subscribe or unsubscribe via the World Wide Web, visit
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > or, via email, send a message with subject or body 'help' to
    > firewall-wizards-request@honor.icsalabs.com
    >
    > You can reach the person managing the list at
    > firewall-wizards-admin@honor.icsalabs.com
    >
    > When replying, please edit your Subject line so it is more specific
    > than "Re: Contents of firewall-wizards digest..."
    >
    >
    > Today's Topics:
    >
    > 1. Putting MS servers behind firewalls (Dilan Walgampaya)
    >
    > --__--__--
    >
    > Message: 1
    > From: Dilan Walgampaya <Dilan@dpitl.com>
    > Reply-To: Dilan Walgampaya <dilan@dpitl.com>
    > To: firewall-wizards@honor.icsalabs.com
    > Date: Mon, 07 Jun 2004 12:23:34 +0600
    > Organization: DPITL
    > Subject: [fw-wiz] Putting MS servers behind firewalls
    >
    > Hi Wizards,
    >
    > I ran in to a problem putting Microsoft Servers behind a firewall. The
    > users has to go through the FW to access the servers. The servers I
    > wanted to put are on an AD domain. There were AD server, File server and
    > an Exchange server. These servers need a large no. of services opened
    > for proper operation. The worse is that exchange server work in a
    > dynamic port setup where the server opens a random port for each
    > different client. MS site has some registry edits that is supposed to
    > correct this dynamic port setup issue. But when I tried these they did
    > not work as per the document describes.
    >
    > Has anybody done this kind of a setup (with other than an ISA server).
    > I am interested in doing this with Netscreen/Pix and Linux IPTables. Any
    > help is appreciated.
    >
    >
    >
    > Thanks in advance
    >
    > Dilan
    >
    >
    > --__--__--
    >
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    >
    >
    > End of firewall-wizards Digest 

    ---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.698 / Virus Database: 455 - Release Date: 02/06/2004
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
  • Next message: firewalladmin_at_bellsouth.net: "Re: [fw-wiz] Putting MS servers behind firewalls"

    Relevant Pages

    • Re: Network intermittently dropping the connection to shared files on server
      ... what we were using with our SBS2000 server with no problems. ... It's a small Server plus 4 Client W/S set up in one office. ... All users that have current connections to the shared files are ... We have a small network < 5 clients connected to a new Dell ...
      (microsoft.public.windows.server.sbs)
    • Re: TCP server stop receiving new connections
      ... reset the event mask of your listening socket each time you ... I have a strange problem in my class library used by all our client ... server applications. ... incomming connections, but keeps current connections. ...
      (microsoft.public.win32.programmer.networks)
    • Re: RTC remoting > Explained in 11 minutes
      ... transport components for connections between clients and servers. ... server response but also server request (to client) -> client response) ... handed off to the different attached plugin command handlers which have ...
      (borland.public.delphi.thirdpartytools.general)
    • Re: Network intermittently dropping the connection to shared files on server
      ... ISA Server detected routes through adapter Loopback that do not correlate ... It's a small Server plus 4 Client W/S set up in one office. ... All users that have current connections to the shared files are ... We have a small network < 5 clients connected to a new Dell ...
      (microsoft.public.windows.server.sbs)
    • Re: CSocket question
      ... client for some reason disconnects. ... server checks for idle time there can easily be 5-30 connections that are ... connections were actively sending data. ...
      (microsoft.public.win32.programmer.networks)