Windows Vista Forums

Domain Traffic - Which Firewall Ports?

  1. #1


    K Guest

    Domain Traffic - Which Firewall Ports?

    I have a secure site-to-site VPN but when it was set up we locked down all
    the ports on the firewalls either end to ensure only traffic we wanted was
    going over it.

    We now want to open it up (as link speeds have increased) so that domain PCs
    (XP Pro SP3) at site can connect back to the DCs at head office (2003 SP2)
    as members of the domain - ie. using domain logon, getting their network
    drives and logon scripts, group policy enforcement etc.

    Speed is not an issue, I just don't know which ports are necessary to open
    and don't want to just open everything.

    Thank you



      My System SpecsSystem Spec

  2. #2


    Meinolf Weber [MVP-DS] Guest

    Re: Domain Traffic - Which Firewall Ports?

    Hello K,

    See here:
    http://support.microsoft.com/kb/555381

    http://support.microsoft.com/kb/179442/

    http://www.microsoft.com/downloads/d...displaylang=en

    http://technet.microsoft.com/en-us/l...EXCHG.65).aspx

    http://technet.microsoft.com/en-us/l.../bb727063.aspx

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > I have a secure site-to-site VPN but when it was set up we locked down
    > all the ports on the firewalls either end to ensure only traffic we
    > wanted was going over it.
    >
    > We now want to open it up (as link speeds have increased) so that
    > domain PCs (XP Pro SP3) at site can connect back to the DCs at head
    > office (2003 SP2) as members of the domain - ie. using domain logon,
    > getting their network drives and logon scripts, group policy
    > enforcement etc.
    >
    > Speed is not an issue, I just don't know which ports are necessary to
    > open and don't want to just open everything.
    >
    > Thank you
    >


      My System SpecsSystem Spec

  3. #3


    Bill Grant Guest

    Re: Domain Traffic - Which Firewall Ports?



    "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
    news:6cb2911d75918cc194c14c84a05@newsgroup

    > Hello K,
    >
    > See here:
    > http://support.microsoft.com/kb/555381
    >
    > http://support.microsoft.com/kb/179442/
    >
    > http://www.microsoft.com/downloads/d...displaylang=en
    >
    > http://technet.microsoft.com/en-us/l...EXCHG.65).aspx
    >
    > http://technet.microsoft.com/en-us/l.../bb727063.aspx
    >
    > Best regards
    >
    > Meinolf Weber
    > Disclaimer: This posting is provided "AS IS" with no warranties, and
    > confers no rights.
    > ** Please do NOT email, only reply to Newsgroups
    > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
    >

    >> I have a secure site-to-site VPN but when it was set up we locked down
    >> all the ports on the firewalls either end to ensure only traffic we
    >> wanted was going over it.
    >>
    >> We now want to open it up (as link speeds have increased) so that
    >> domain PCs (XP Pro SP3) at site can connect back to the DCs at head
    >> office (2003 SP2) as members of the domain - ie. using domain logon,
    >> getting their network drives and logon scripts, group policy
    >> enforcement etc.
    >>
    >> Speed is not an issue, I just don't know which ports are necessary to
    >> open and don't want to just open everything.
    >>
    >> Thank you
    >>
    >
    >
    Have you tried it without making any changes? Where did you set these
    filters?

    If they were set on the gateway router they have little or no effect on
    VPN traffic. When the VPN traffic goes through the gateway router/firewall
    it is encrypted and encapsulated. All the the firewall sees is the PPTP or
    IPSec header. It can't see the actual TCP headers.



      My System SpecsSystem Spec

Domain Traffic - Which Firewall Ports?

Similar Threads
Thread Forum
Windows Firewall ALWAYS Blocks Incoming Traffic
With Vista Home Premium x64, I can't get Windows Firewall to stop blocking incoming connections. As administrator, I have gone into Control...
System Security
Firewall message - Wudfhost.exe attempting outbound traffic - to IP 67.135.105.130...
F-Secure Security suite prompted me whether I wanted to allow Wudfhost.exe to send outbound traffic to IP 67.135.105.130 - after I inserted my 16GB...
Vista performance & maintenance
Vista Firewall and local IPV6 traffic dropped?
I finally upgraded my XP Pro system to Vista Business and have now noticed a problem with Vista's firewall, or IPV6, maybe both. I have some...
Vista networking & sharing
Help, Vista's firewall started to work with outbound traffic, and I don't know how to stop it!!!!!
Dear friends: Help, Vista's firewall started to work with outbound traffic, and I don't know how to stop it!!!!! I don't know why, but as a...
Vista General
Firewall blocks network traffic
After installing vista updates a few weeks ago my laptop lost all connections with the internet (Wireless and bluetooth). After spending untold...
Vista security
Firewall blocks ALL outgoing traffic though rules for passing exis
I've asked this question some months ago. I still haven't found a solution. What should be done? In Microsoft's firewall all software can pass...
Vista security
Vista firewall not blocking outbound traffic despite explicit rules to do so
I installed Adobe Reader 8 on Vista RTM. In Windows Firewall with Advanced Security, I added six outbound firewall rules, one for each of the .exe...
Vista security