Re: IIS Outbound Ports

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 03/09/04 

Date: Tue, 9 Mar 2004 22:45:02 +1100

What services are you using on IIS? WWW? FTP? SMTP?

Cheers
Ken

"Dominic Marsat" <djmarsatAThotmail.com> wrote in message
news:uHSNVPcBEHA.3284@TK2MSFTNGP09.phx.gbl...
: I'm running IIS on a windows 2000 server
:
: The server is behind a firewall which only
: allows incoming connections on port 80
: (TCP & UDP) and blocks all others
:
: Users log onto the server using integrated
: windows authentication, anonymous access
: is disabled.
:
: Problem:
:
: If all outgoing ports, except port 80 (TCP
: & UDP) are closed users cannot access the
: site. Entries appear in the firewall logs but
: not in the website logs (i.e. their IP address).
:
: Temp Solution:
:
: Allow outgoing UDP ports in the range
: 1000-2000, although these connections
: never appear in the firewall logs, which
: made identifying the problem extremely
: difficult + users still report intermittent
: connection problems.
:
: Is this IIS related or due to the firewall
: (Netgear DG834)?
:
: Can anyone provide a complete list of
: ports required by IIS for this
: configuration?
:
:

Relevant Pages

  • Re: IIS / Web Services Security threats
    ... You will be surprised to know, due to a recent virus attack on the perimeter network, the common ports have been closed too. ... I also develop Java applications which runs on weblogic server. ... Since, the entire world knows about port 80 and 443, I thought opening a specific port with IP Sec configuration may make the network little secure. ... My security team thinks allowing communication between the two IIS ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Hacked?
    ... Mike Burgess http://www.mvps.org/winhelp2002/ ... >>> currently hosting the email server, DNS, as well ... Also opened ports for ssl, ... >>> more attention to the firewall logs, ...
    (microsoft.public.security)
  • RPC over HTTP
    ... Are the proper ports opened in the firewall to the ... >server installation. ... >the authentication to IIS), and then the box go aways ... >external hostname/IP address because we're using NAT ...
    (microsoft.public.exchange.connectivity)
  • Re: How to shut off the ports
    ... > ports, and more urgently, how to shut them down. ... We don't have the server resource ... 7007 are not ports that come with Windows or with IIS. ... Running a firewall is only part of a complete security plan. ...
    (microsoft.public.inetserver.iis.security)
  • Re: redirecting from mydomain.com to www.mydomain.com
    ... You can do this in IIS if you would like to. ... You should close down all ports you do not use. ... I know I can write an ASP to redirect the site to full name as www.mydomain.com, but> is there any other elegant way of doing this in IIS so for every site> that I install I don't need to dump a small script to do the work? ... I have windows 2000 just running of covad's dsl T1 and the> router is just directly connect to my win 2000 server without any> firewall protection.. ...
    (microsoft.public.inetserver.iis)
Loading