| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] logging into an NT domain controller through FW-1
- To: [email protected]
- Subject: Re: [FW-1] logging into an NT domain controller through FW-1
- From: Michael Knight <[email protected]>
- Date: Fri, 9 Aug 2002 13:22:24 -0400
- Comments: cc: [email protected]
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcI/xzK73VhDhvPkQHqhLA23d85QZwAAHKM/
- Thread-topic: [FW-1] logging into an NT domain controller through FW-1
For Windows NT 4.0 - add ports 135; 137-139 (tcp and udp)
For Windows 2000 - add port 135; 137-139, 389; 445; 464 (tcp and udp)
For more information, go to:
http://support.microsoft.com/default.aspx?scid=kb;JA;q289241
http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp
Regards.
MK
-----Original Message-----
From: RUSSELL T. LEWIS [mailto:[email protected]]
Sent: Fri 8/9/2002 12:37 PM
To: [email protected]
Cc:
Subject: [FW-1] logging into an NT domain controller through FW-1
We now have FW-1 SmallOffice (using enterprise install so I can use the GUI, not
the web config) running on NT4. This was installed off a NG FP2 CD. We are
still in the 30 day trial.
I have the firewall in a test setup. I set an allow all rule, and set up NAT
with the Hide option to the LAN card, and NAT using Static to the DMZ. The
client can access the Internet through the firewall just fine. I now am
removing the allow all, and adding only the needed rules. We will have an NT 4
domain controller in the DMZ, and all the clients need to login to this via the
LAN. I know this is not the BEST method to do things, but with the current
hardware that's how it's got to be done. we will upgrade servers and get the
domain controller out of the DMZ after the firewall is up and I have a chance to
breath again. Does anyone know where I can find what rule(s) to create to do
this? I can't seem to find it anywhere. I'll keep looking, but any info you
can provided is greatly appreciated.
Thanks a ton!
-Russell Lewis
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
è±ëoiÆŠ‰ÎÓ9÷âqê+k²™ë,j¬±éÝjw¦j)m ²M!VX¬¶Ërœ’š"ž×(š)í…àN
Š ¶ž™¨¥i×lz×ðÖf¢–)à–+-ž‰šŠTèº{.nÇ+‰·Ÿ®‰†+&j)bž b²Úey« ±çèÚîr؞ƆÛiÿü0ÁÈ^rJhŠ{\¢oìz»âqë?™¨¥Šx!¶iH*.…«Þj|ª¹ë-Š‰ì¢xhÂÚ …©à{*.®Ë±Êâ¦ØžŠmŠ‰ìzf¢•ü5£ ÞÛ …ç$¦ˆ§µÊ&
|
|
