Members Login
Username 
 
Password 
    Remember Me  
FireWall-1 Gurus Forum -> FireWall-1 Gurus Forum -> DCOM - Exchange 2000 through NG-AI R54
Post Info TOPIC: DCOM - Exchange 2000 through NG-AI R54
Phil


Status: Offline
Posts: 2
Date:
DCOM - Exchange 2000 through NG-AI R54
Permalink  

Hi,
Anyone give me any advice please as I am puzzled .
We have a MS 2000 Exchange server on the DMZ On an Internal 192. address and another group of servers on the internal network with 10. addresses. From the DMZ server we are unable to get DCOM/RPC to work properly to connect to the server on the internal network. We are not using any NAT which I understand can cause DCOM problems. The firewall rule between these two servers is completely unrestricted in both directions. All DCE-RPC groups are allowed as well in a seperate rule. Routing between the two boxes is fine as I can ping in both directions. I do not believe there to be any ACL's in place on network equipment. The smartview logs do not show us blocking any traffic.
I don't believe it is a fault with the server on the dmz as if I move it to the Internal network but on a different subnet to the internal server it works fine.
I have checked our Exchange boxes and they are all set to use DCOM over TCP/IP as UDP is will not work with win2k and upwards.
Exchange and windows server all patched to latest releases
Anyone got any ideas?
Cheers
Phil 

__________________
EgonR


Status: Offline
Posts: 1
Date:
Permalink  

Hi,


try the following


first create a rule like


Src: DMZ-Server 


Dst: Internal-Server


Service: Port 135/tcp


Second (below the first rule)


Src: DMZ-Server


Dst: Internal-Server


Service:  any


 


Regards,


Egon



__________________
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.
FireWall-1 Gurus Forum -> FireWall-1 Gurus Forum -> DCOM - Exchange 2000 through NG-AI R54
Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse 		Powered by ActiveBoard