Security Basics mailing list archives

Open ports to establish a one-way trust

From: "Ju Ne" <ddjjembe1 () hotmail com>
Date: Tue, 01 Mar 2005 10:15:34 -0600

We have a domain in our WAN that needs an Active Directory

one-way trust established with our domain. The change has been made inActive Directory but we have been unable to test this new trust? What portsneed to be opened at the firewall to allow this trust from a firewallperspective? Are any of the ports listed below required for this trust?


TCP 135   Microsoft RPC
UDP 137  Netbios-ns
UDP 138  Netbios-dgm
TCP 139  Netbios
TCP 42  - WINS, Nameserv
TCP/UDP 389- LDAP
TCP 636 - SLDAP
TCP 3268 - MSFT-GC
TCP 3269 -MSFT-GC-SSL
TCP/UDP 53 -DNS
TCP/UDP 88 - Kerberos, www
TCP 445 - SMB

Thanks,

Djembe

_________________________________________________________________

FREE pop-up blocking with the new MSN Toolbar get it now!http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

Current thread:

Open ports to establish a one-way trust Ju Ne (Mar 01)
- RE: Open ports to establish a one-way trust dave kleiman (Mar 02)
- <Possible follow-ups>
- Re: Open ports to establish a one-way trust Eric McCarty (Mar 02)
- RE: Open ports to establish a one-way trust Depp, Dennis M. (Mar 02)
- RE: Open ports to establish a one-way trust Mike (Mar 02)