though not exactly what you are asking for - this article has alot of applicable info:

Active Directory Replication over Firewalls
http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp

hth,

john

[EMAIL PROTECTED] wrote:
LDAP: 389
GC: 3268
DNS: 53

There's secured ports for LDAP and GC ... I think it's 636 and 3269...

marcus c. oh
.\core technologies\cox communications, inc.
.\mvp\windows server systems\management
[v] 404.847.6117     [c] 404.391.7097


-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave A. Marquis Sent: Wednesday, March 23, 2005 2:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Domain Controller Firewalls

Hmm... Doesn't sound like a good idea to me. I would suggest a Cisco pix
firewall as the windows model is kinda insecure.... My 2 cents

David A. Marquis
Computer Systems Administrator

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt Brown
Sent: Wednesday, March 23, 2005 1:25 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Domain Controller Firewalls

Do any of you run the windows firewall on your Domain Controllers?

If so where would I find what ports need to be open for Active Directory
&
DNS?

Thanks,
--
Matt Brown
[ SELECT * FROM LDAP_Servers WHERE AD > OpenLDAP ]
Information Technology System Specialist
Eastern Washington University




List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

This e-mail message, including all attachments, is for the sole use of
the intended recipients(s) and may contain confidential and privileged
information. You may NOT use, disclose, copy, or disseminate this
information. If you are not the intended recipient, please contact the
sender by reply e-mail immediately. Please destroy all copies of the
original message and all attachments.

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to