RPC-HTTP Port 1030



I am successfully using RPC-over-HTTP to connect my users. I just noticed
something in the firewall logs that I can't figure out, and it just bugs me
that there is something happening here I don't understand.

As Outlook is doing its thing, you can see requests like these in the
firewall monitor:

----> http://my.external.server:443/rpc/rpcproxy.dll?my.internal.server:6001
----> http://my.external.server:443/rpc/rpcproxy.dll?my.internal.server:6002

All of which are accepted by the rpcproxy on my.internal.server and make
sense. Every so often, though, I see one with a different port number:

---> http://my.external.server:443/rpc/rpcproxy.dll?my.internal.server:1030

That one is rejected, in spite of the RPCproxy's "ValidPorts" options being
set like so:

---> my.internal.server:593;my.internal.server:1024-65535;

Also, I can see (with netstat -an) that the Exchange server is using this
port extensively. That makes me wonder what it is, and why the RPC proxy is
denying it.

Can anybody shed any light on what this port is used for, and whether having
these proxy calls get denied has any bad effect?


.



Relevant Pages

  • Configure iptables to not log certain hits
    ... Create a script that would parse my firewall logs for IP ... Doing this would certainly stop their ping attempts, ... to port 1026 or 1027. ... iptables command could result in scp connections not being logged. ...
    (comp.os.linux.security)
  • SUMMARY: remote printing
    ... lp system we should only need port 515 open through the firewall. ... still not working is to look at the firewall logs while tyring to send print ... Roger Kynaston ... Information Technology Services ...
    (SunManagers)
  • Re: IPCOP newbie
    ... >>> source port and destination port. ... The destination port is the port I chose ... >> Depending on how your set them up, the firewall logs all hits on your ...
    (comp.security.firewalls)
  • Re: Connection to TCP port 1197?
    ... I'm not aware of programs running on this port except some ... I wouldn't bother about it too much. ... My firewall logs are ... Strange, but as you say, I'll just have to ...
    (comp.security.firewalls)

Loading