One-way trust between Internal network and DMZ

[Amila Chandrasekera]

WE are going to build a separate W2K domain in DMZ and have a one way trust
between internal network and DMZ. Are there and security concerns ? Can you
direct me to any documents that discusses this kind on scenarios. ?

Thanks.
Amila

 

[super-G]

Unfortunately , to allow your trust traffic to cross your
firewalls you will need to open the RPC traffic. that is
not secure as RPC uses dynamic ports. I beleive you can
modify the registry so that RCP uses the same port,
therefor making RPC mon-dynamic. Look in technet and see
if you can find an article explaining how to configure
Trusts through firewalls. I will look and will send you
the link If I find it.

Good Luck