Re: File sharing between an AD Domain controller and a member server through a firewall

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 06/10/04 

Date: Thu, 10 Jun 2004 05:09:15 GMT

See if the following KB article helps and pay particular attention to how
dynamic rpc works and how to configure a server and firewall for it. You may
also want to check your firewall logs for dropped traffic from the computer in
the dmz and I would not be surprised if it showed inbound traffic to ports in
the range 1025-30 to the domain controller as the problem. Otherwise consider
using ipsec policy with a rule that allows ipsec protected traffic between the
two computers and through the firewall. -- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B179442
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B233256

"Clementius" <anonymous@discussions.microsoft.com> wrote in message
news:%23ecQTDpTEHA.2324@TK2MSFTNGP10.phx.gbl...
> Hi,
> I am configuring an access-list for traffic from a dmz server to an internal
> server. The dmz server is a 2003 domain member server. The internal server
> is a 2003 AD controller and file server. The plan is to allow file access
> from the dmz server to the internal server. Eventually, the dmz server will
> be a front-end to the internal server from the Internet through SSH or
> Terminal Server sessions. So far I opened the following ports to the
> internal server (from the dmz) on the firewall:
> TCP domain
> UDP domain
> tcp 88
> udp 88
> tcp 135
> udp 389
> tcp 389
> tcp 445
> udp netbios-ns
> udp netbios-dgm
> tcp netbios-ssn
>
> I am able to perform nslookup from the dmz server using the internal server
> for DNS and NAT seems to work fine. But when I try to map a drive from the
> dmz server to a share on the internal server I get: "The drive could not be
> mapped because no network was found".
> Am I missing something? Thanks for your help. C
>
>

Relevant Pages

  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: For Microsoft Partners and Customers Who Cant Download or Access
    ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
    (microsoft.public.dotnet.general)
  • Re: IP Relay/NAT set up on W2K3
    ... NAT on the perimeter, then "proxy" the connection to the internal server. ... is a requirement,...the firewall is "in the way", and the only way into the ...
    (microsoft.public.windows.server.networking)
Quantcast