Firewall Wizards mailing list archives
RE: Putting MS servers behind firewalls
From: "Melson, Paul" <PMelson () sequoianet com>
Date: Mon, 7 Jun 2004 16:02:26 -0400
Yes, but it's god-awful and relatively insecure, especially since most of the services that must talk bi-directionally through the firewall have been attack vectors for recent worms. In addition to DNS, Kerberos, LDAP, and NetBIOS (135-139, 445), you will also need to statically assign DCOM/RPC ports. Sounds like you've already tried this. I've had a reasonable amount of success with this for both Exchange and BackupExec. Link here: http://www.microsoft.com/com/wpaper/dcomfw.asp PaulM
-----Original Message----- From: Dilan Walgampaya [mailto:Dilan () dpitl com] Sent: Monday, June 07, 2004 2:24 AM To: firewall-wizards () honor icsalabs com Subject: [fw-wiz] Putting MS servers behind firewalls Hi Wizards, I ran in to a problem putting Microsoft Servers behind a firewall. The users has to go through the FW to access the servers. The servers I wanted to put are on an AD domain. There were AD server, File server and an Exchange server. These servers need a large no. of services opened for proper operation. The worse is that exchange server work in a dynamic port setup where the server opens a random port for each different client. MS site has some registry edits that is supposed to correct this dynamic port setup issue. But when I tried these they did not work as per the document describes. Has anybody done this kind of a setup (with other than an ISA server). I am interested in doing this with Netscreen/Pix and Linux IPTables. Any help is appreciated. Thanks in advance Dilan _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- Re: Putting MS servers behind firewalls, (continued)
- Re: Putting MS servers behind firewalls Devdas Bhagat (Jun 08)
- Re: Putting MS servers behind firewalls Tichomir Kotek (Jun 09)
- Re: Putting MS servers behind firewalls Devdas Bhagat (Jun 08)
- Re: Putting MS servers behind firewalls Dave Piscitello (Jun 08)
- RE: Putting MS servers behind firewalls Mark Gumennik (Jun 08)
- RE: Putting MS servers behind firewalls Paul D. Robertson (Jun 08)
- Re: Putting MS servers behind firewalls Dan Harp (Jun 08)
- Message not available
- Re: Putting MS servers behind firewalls Victor Williams (Jun 08)
- RE: Putting MS servers behind firewalls Michael H (Jun 07)
- More infor - Re: Putting MS servers behind firewalls Dilan Walgampaya (Jun 08)
- Re: Putting MS servers behind firewalls firewalladmin (Jun 07)
- RE: Putting MS servers behind firewalls Melson, Paul (Jun 08)
- RE: Putting MS servers behind firewalls Kelly, Chris W. (Jun 08)
- Re: Putting MS servers behind firewalls Johann_van_Duyn (Jun 09)