Re: W32time and opening port NDP port 123

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Dave Stoecker (david_stoecker_at_hotCOFFEEmail.com)
Date: 02/26/04


Date: Wed, 25 Feb 2004 23:14:23 -0600

I get these log entries every 2 or 3 days, but I'm fairly certain the sync
is happening most of the time. My packet filter is same as IBC suggests...
Try a manual sync:
Stop the windows time service, open a command prompt, type "w32tm -once" (no
quotes) and see if it connects...

I check this whenever I seem to be getting too many of the log errors - as a
matter of fact I just had one 2 hours ago. I did the manual sync and my
system connected and was only 57ms off...

Probably flaky network conditions or the time server is too busy (?) Also,
I use IP addresses rather than DNS names, seem to have better luck that way.

Hth - DS

"Fred Blum" <h.f.blum@marketconnectnospam.nl> wrote in message
news:elW%23jl7%23DHA.4060@TK2MSFTNGP10.phx.gbl...
>
>
> I've changed my packet filter from Local Port fiexed 123 to all ports. My
> filter settings where for the rest the same.
> Still Shields Up!http://grc.com/x/ne.dll?rh1dkyd2 reports the port as
> closed.
>
> ----------------------------------------------------------------------
>
> GRC Port Authority Report created on UTC: 2004-02-25 at 15:56:02
>
> Results from probe of port: 123
>
> 0 Ports Open
> 1 Ports Closed
> 0 Ports Stealth
> ---------------------
> 1 Ports Tested
>
> THE PORT tested was found to be: CLOSED.
>
> TruStealth: FAILED - NOT all tested ports were STEALTH,
> - NO unsolicited packets were received,
> - A PING REPLY (ICMP Echo) WAS RECEIVED.
>
> ----------------------------------------------------------------------The
> event log has the follwing error: The NTP server didn't respond. I've set
> the authorative time server to time.microsoft.com as according to KB
216734
> this machine is available. Should I try another one?0Or is this port
indeed
> closed? Howto override this in ISA? Regards,Fred
>
>
>
>
>
> "IBC" <spamityspam@spam.spam> wrote in message
> news:eDrlEG7%23DHA.2636@TK2MSFTNGP09.phx.gbl...
> > I added this filter:
> >
> > Go to ISA\Access Policy\IP Packet Filters
> > Right click IP Packet Filters and select New\Filter
> > Give the Filter a name (like Time Server or whatnot)
> > Select Allow Packet transmission
> > Select Custom
> > IP Protocol is UDP
> > Direction is Send/receive
> > Local port is All ports
> > Remote port is Fixed Port
> > Port Number is 123
> > Filter applies to the default addresses on the external interface
> > Filter applies to all computers.
> >
> > Give that a whirl.
> >
> >
> > "Fred Blum" <h.f.blum@marketconnectnospam.nl> wrote in message
> > news:eGIeAe6#DHA.4060@TK2MSFTNGP10.phx.gbl...
> > >
> > > I have had a problem with two domain controllers in our network no
> longer
> > > replicating as the time difference between the two became more then
than
> 5
> > > minutes.
> > >
> > > On the operations master (also acting as the PDC) i want to setup
W32tim
> e
> > to
> > > use an external time server (time.micorosoft.com). W32time logs NTP
> server
> > > not responding and ShieldsUp! reports 123 as being closed on our
> network.
> > So
> > > I guess the port 123 is blocked by our ISA server. How can I open this
> > port
> > > to send receive?
> > >
> > > TIA,
> > >
> > > Fred Blum
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • RE: Offer Remote Assistance
    ... you must open TCP port 135 for Remote Assistance. ... Please follow these steps to create an IP Packet Filter on the SBS Server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Telnet to Router from Server
    ... Open the ISA Administration tool, and then expand the Server ... click Create Packet Filter. ... Local Port: All Ports ...
    (microsoft.public.windows.server.sbs)
  • RE: an error in the NMAP docs?
    ... > and outbound by deny all rules and then add a packet filter ... > rule to allow the machine to act as a DNS server (inbound port ... the server's port 20. ... > Earn your MS in Information Security ONLINE ...
    (Security-Basics)
  • RE: VBscript Error on SBS2k3
    ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... The Packet filter is where I can either allow or block the ... | Local Port ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows Update
    ... create an outbound TCP packet filter on ... 443 (Local Port Dynamic, Remote Port Fixed on 443) using the following ... From within the ISA Management MMC console, ... accessing the Windows Update Site from the same box. ...
    (microsoft.public.isaserver)