Dynamic Client Ports in Windows Server 2008 and Windows Vista (or: How I learned to stop worrying and love the IANA)

re: Dynamic Client Ports in Windows Server 2008 and Windows Vista (or: How I learned to stop worrying and love the IANA)

lukasbeeler — Sat, 25 Aug 2007 21:13:19 GMT

> Generally speaking, we don’t recommend that you restrict traffic between servers on your internal network.

I've been telling this to customers too. Do you know of an official statement from Microsoft which states this? It's always nice to have a proper link for such topics.

re: Dynamic Client Ports in Windows Server 2008 and Windows Vista (or: How I learned to stop worrying and love the IANA)

NedPyle — Mon, 27 Aug 2007 19:38:57 GMT

Hi lukasbeeler,

Yes and no. We have some KB documentation that has been making this 'don't restrict' guidance:

179442 How to configure a firewall for domains and trusts

http://support.microsoft.com/default.aspx?scid=kb;EN-US;179442

832017 Service overview and network port requirements for the Windows Server system

http://support.microsoft.com/default.aspx?scid=kb;EN-US;832017

However, they have not yet been updated to reflect these new port assignments. Since their guidance was to not block anything, they are ok for now though. This should all be up to date before Windows Server 2008 comes out.

-Ned

The case of the blocked FRS replication

'Cos the world needs one more... — Mon, 15 Sep 2008 01:03:45 GMT

So I haven't written anything in quite a while and felt compelled to write something I recently ran into.