Re: TCP/IP Filtering Problem

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 03/30/05

  • Next message: Robert Moir: "Re: ISA Opinions" 
    Date: Wed, 30 Mar 2005 09:20:52 +0200

    Hi Scott,

    This article may help:

    Service overview and network port requirements for the Windows Server system
    http://support.microsoft.com/?kbid=832017

    I am not sure what exactly your already configured but don't forget to open:
    * high TCP ports (1024-65536)
    * GC TCP 3269 and 3268
    ... 

    -- 
Mike
Microsoft MVP - Windows Security
"Scott" <Scott@discussions.microsoft.com> wrote in message 
news:0EA8B176-C30D-4EF4-9E7E-76F5B1257EF5@microsoft.com...
>I am trying to setup TCP/IP filtering on some 2k and XP workstations.
> Putting in the proper TCP ports I have no problem logging on and getting
> around the network.  If I add UDP ports to allow I cannot log on to the
> network.  It can not find DCs and DNS servers.  I have put in all the 
> ports I
> can think of with no luck (53, 88, 123, 137, 138, 389, 500, 4500, 1035, 
> plus
> more).  Any Ideas?
> -- 
> Thanks for your help!!
  • Next message: Robert Moir: "Re: ISA Opinions"

    Relevant Pages

    • Re: 2 pc network - cant see host files from pc 2 on pc 1
      ... Assuming that you have firewall protection via your internet router try ... workgroup because it will be needed for the network to work correctly. ... see if you can access TCP ports 139 and 445 on computer one of which at ... permissions. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: PC Tools Firewall Question
      ... So, it's to be assumed that the two machines that are connected to your router, the LAN or Local Area Network, are never to share resources or network between the two, which are the ports you're blocking below with the PFW. ...
      (comp.security.firewalls)
    • Re: Setting up Remote Desktop web connection in winxp mce to work
      ... Its possible her office network admins are blocking the outgoing ports. ... Also check to see your using the correct public IP for your router and make sure the router is configured to disable remote management. ... > anyway to test the remote connection, other than trying to connection> from ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: How to spoof MAC-address in SuSE Linux?
      ... > that in their contracts and they threatened the customers and stuff. ... ran more then one PC on the network while it was not allowed to do so. ... Here there are several providers that close all ports till 1024 and some ... support you think you are going to get is gone. ...
      (alt.os.linux.suse)
    • Re: When do I choose for OUTBOUND or INBOUND in a protocol?
      ... Ori YosefiISA Server Team ... > tab I only checked the external network. ... >> If you want to allow access to iSpQ on the internal network, you should>> create a publishing rule that publishes these ports to the external> network. ...
      (microsoft.public.isa)