Re: Which ports to allow NT domain controllers ...?

[Jeffery.Gieser () minnesotamutual com]

Chris

#Which ports do I need to open to allow all needed NT
#domain controller packets to go through (updates to
#domain, browsing, etc.) a firewall? All my boxes are
#NT - no Unix. Any help is appreciated! Thanks!

These are most of the ports used by NT.  DOn't forget that you can look at
the old posts on this list and also on the firewalls list at
lists.gnac.net.  I believe I have posted this at both places before.

Windows NT V4.0

Browsing  UDP:137,138
DHCP Lease     UDP:67,68
DHCP Manager   UDP:135
Directory Replication:   UDP:138 TCP:139
DNS Administration  TCP:139
DNS Resolution UDP:53
Event Viewer        TCP:139
Logon Sequence UDP:137,138 TCP:139
Netlogin       UDP:138
Pass Through Violation   UDP:138
Performance Monitor TCP:139
PPTP           TCP:1723 IP Protocol:47
Printing            UDP:137,138 TCP:139
Registry Editor          TCP:139
Server Manager TCP:139
Trusts              UDP:137,138 TCP:139
User Manager        TCP:139
WinNT Diagnostics   TCP:139
WinNT Secure Channel     UDP:137,138 TCP:139
WINS Replication    TCP:42
WINS Manager        TCP:135
WINS Registration   TCP:137

Regards,
Jeffery Gieser


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards