Domain login through a firewall

[Anil Daniel]

Hi All,

Can someone help me with the following issue...

We need to have Windows 2000 domain login and
authentications happening from Windows 2000 proffessional
machines, which are behind a firewall. Would like to know
what are all the ports to be opened on the Firewall for
this....

Thanks and regards
Anil

 

[Matjaz Ladava [MVP]]

They are quite a few of them and generally I would suggest you to use VPN
for the clients outside firewall to first make a tunnel to your LAN and
authenticate in this way.
If you read this article
http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp
you will get the idea of which ports are needed. It talks about replication,
but the ports are the same (RPC, DNS, Kerberos, LDAP...)

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com

 

[Herb Martin]

They are quite a few of them and generally I would suggest you to use VPN
for the clients outside firewall to first make a tunnel to your LAN and
authenticate in this way.

I second the VPN -- then you focus your attention and
security efforts on (just) keeping that safe -- you also
get to differentiate the users through "dial up users"
special group so that you may reduce or further restrict
what they can access when entering the network this
way.