Configuring DFSR to a Static Port - The rest of the story

re: Configuring DFSR to a Static Port - The rest of the story

Mark Radovan — Fri, 17 Sep 2010 00:04:47 GMT

Hello Ned,

Nice Job! Really informative Blog... Anyway, I've just stumbled upon this article.

social.technet.microsoft.com/.../active-directory-replication-over-firewalls.aspx

And there is a section there about limiting the RPC ports. Would you know if we limit the RPC ports of AD and FRS to static ports would that effectively limit the DCOM\WMI RPC ports as well? The goal is to trying to enable the DFRS ‘Diagnostic Health Reports’ without opening to much high ports in Perimeter.

regards,

RAD

re: Configuring DFSR to a Static Port - The rest of the story

NedPyle [MSFT] — Tue, 06 Apr 2010 13:46:24 GMT

You can sort of control it this way. Sort of.

http://blogs.technet.com/filecab/archive/2006/08/24/449013.aspx

re: Configuring DFSR to a Static Port - The rest of the story

geoff.hadden@macquarie.com — Tue, 06 Apr 2010 00:57:56 GMT

Hi Ned,

We want to roll out DFSR into our very secure DMZ. at the moment we have traffic from our prod to DR servers going through 2 different firewalls. one for prod traffic and the other for mgmt. our networks team has informed us that we need to direct DFSR traffic through the mgmt nics so my question is, can we route DFSR traffic? and if so, what is the best way to go about it??

thanks.