Re: Windows Media Server deployment

Hi Neil !

Server is in datacenter so we don’t need firewall on every machine.
We tested ports with www.grc.com shields up and there is definitely firewall
somewhere in between. When we try to access windows media service locally
mms://eridani/Sample_Broadcast everything works fine, but from outside we can
not access it. Windows firewall is turned off, Tcp/Ip filtering is disabled.
All those ports are opened, but when we try to telnet or connect via http,
mms, or rtsp connection fails.

Is there any different way to disable ports on win 2003 ???

Can you help us to determine problem.

Thanks

Igor


"Neil Smith [MVP Digital Media]" wrote:

> Hmmm, odd (not that I'd run a server without a firewall anyway).
>
> If you get a command line up and do
>
> netstat -an
>
> Can you see the service listening on ports
>
> 80 TCP
> 554 TCP, UDP
> 1755 TCP, UDP
>
> Or is something else hogging those services such as ISA server (1755)
> or a web server (80) or Helix Server / Darwin Streaming Server (554) ?
>
> Cheers - Neil
>
>
> On Mon, 30 Jan 2006 04:16:29 -0800, "Igor"
> <Igor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>
> >Windows firewall was switched off before i installed WMS.
> >
> >Control panel/Windows firewall/Off
> >
> >I'm sure about that.
> >
> >Any ideas ???
> >
> >"Neil Smith [MVP Digital Media]" wrote:
> >
> >> On Mon, 30 Jan 2006 01:16:27 -0800, "Igor"
> >> <Igor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> >>
> >> >Hello,
> >> >
> >> >We have successfully installed WMS on machine. We are running PLESK on same
> >> >machine with WMS, but problem is that we cannot access to WMS stream from
> >> >outside with mms:// or http:// protocol. Control protocols (http,mms,rtsp)
> >> >are enabled. WMS http port is different then IIS http port. WMS works on http
> >> >port 8000.
> >> >
> >> >We have multiple Ips and vhosts on that machine. Locally everything works
> >> >perfect , but from outside ( as mentioned before ) nothing works as it
> >> >should, and we do not have any firewall.
> >>
> >> ______________^^^ Are you *sure* about that ???
> >>
> >> Windows Server 2003 release 2 comes with the windows firewall switched
> >> on by default, and WMS is not enabled to traverse that until you
> >> specifically enable it. This is a perfectly reasonable security
> >> measure to keep the box locked down until a server role is configured
> >> and access permissions are set to your satisfaction.
> >>
> >> If in doubt, so to the firewall and the easiest way is to add
> >> wmservices.exe to the exceptions list, as stated in this document
> >> http://www.microsoft.com/windows/windowsmedia/serve/firewall.aspx#WindowsFirewall
> >>
> >> HTH
> >> Cheers - Neil
> >>
>
.

Relevant Pages

  • Re: Interesting webserver intrusion (apache 1.3.31, mod_ssl 2.8.18, php 4.3.7)
    ... > fairly tight(only allowing 4 ports in), but perhaps I could tighten it ... The host systems firewall rules govern the access to the jailed system. ... What connections does your server need to ... Perhaps there is a 0-day for your ftp server out there. ...
    (Incidents)
  • Re: Setup Error when connecting Xbox 360 to MCE2005 PC
    ... Attempt to add your Xbox 360 again via the Media Center Extender Manager ... but receive the Setup Error (stating problems with the firewall ... Microsoft KB911728 for opening ports and allowing traffic to/from XBox ... Unable to open ports in the Windows firewall. ...
    (microsoft.public.windows.mediacenter)
  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Add 2nd NIC after intial install?
    ... My biggest question with 1 NIC is: even if workstations are protected with individual firewall products, what is protecting the SBS server itself if ports are open for remote access through the Linksys firewall? ...
    (microsoft.public.windows.server.sbs)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
Loading