HELP REQUIRED
can anybody advise me on what ports i will need to open
on a pix firewall that will allow me to join a computer
that resides off of a dmz interface (security level 50)
to a domain whose domain controller resides off of an
inside interface (security level 100)
the domain controller (server-3) is running active directory
integrated dns
the config i have setup is this
access-list 102 permit udp host 192.168.2.2 host 192.168.1.2 eq 53
access-list 102 permit tcp host 192.168.2.2 host 192.168.1.2 eq 3268
access-list 102 permit tcp host 192.168.2.2 host 192.168.1.2 eq 88
access-list 102 permit tcp host 192.168.2.2 host 192.168.1.2 eq 389
access-list 102 permit tcp host 192.168.2.2 host 192.168.1.2 eq 464
static (inside,dmz) 192.168.1.2 192.168.1.2
access-group 102 in interface dmz
with the above config when i try and join the dmz based computer
to the domain i get the following reply
dns was succesfully queried for the service location (srv)
resource record used to locate a domain controller for domain acme.com
the query was for the srv record _ldap._tcp.dc._msds.acme.com
the following domain controllers were identified by the query
server-3.acme.com
it then tells me that a domain controller for the acme.com
could not be contacted
i'm pretty sure i have missed something out when configuring the
firewall as clients residing on the same subnet as the domain controller/dns
server can join the domain with no problems
any help that anybody can give me will be greatly appreciated
melvyn brown
