Re: Windows Media Server deployment

On Mon, 30 Jan 2006 08:11:27 -0800, "Igor"
<Igor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

>Hi Neil !
>
>Server is in datacenter so we don?t need firewall on every machine.
>We tested ports with www.grc.com shields up and there is definitely firewall

Well I'd start by asking the datacenter hosting to allow through your
services - which is a rather large range of ports outbound (few
inbounf though).

It's going to be hard to tell where the firewall is, the default
behaviour will be to silently drop packets. You might get some
traction by using ICMP tools like

pathping -T -R ip_add_of_host

for example, or using hacker tools like nmap (or nmapfe if you're not
happy with the command line). Obviously, tell your host you're about
to run the test or they might lock down your testing IP address with
IDS tools <g>

>somewhere in between. When we try to access windows media service locally
>mms://eridani/Sample_Broadcast everything works fine, but from outside we can
>not access it. Windows firewall is turned off, Tcp/Ip filtering is disabled.
>All those ports are opened, but when we try to telnet or connect via http,
>mms, or rtsp connection fails.
>
>Is there any different way to disable ports on win 2003 ???
>
>Can you help us to determine problem.
>
>Thanks
>
>Igor
>
>
>"Neil Smith [MVP Digital Media]" wrote:
>
>> Hmmm, odd (not that I'd run a server without a firewall anyway).
>>
>> If you get a command line up and do
>>
>> netstat -an
>>
>> Can you see the service listening on ports
>>
>> 80 TCP
>> 554 TCP, UDP
>> 1755 TCP, UDP
>>
>> Or is something else hogging those services such as ISA server (1755)
>> or a web server (80) or Helix Server / Darwin Streaming Server (554) ?
>>
>> Cheers - Neil
>>
>>
>> On Mon, 30 Jan 2006 04:16:29 -0800, "Igor"
>> <Igor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>>
>> >Windows firewall was switched off before i installed WMS.
>> >
>> >Control panel/Windows firewall/Off
>> >
>> >I'm sure about that.
>> >
>> >Any ideas ???
>> >
>> >"Neil Smith [MVP Digital Media]" wrote:
>> >
>> >> On Mon, 30 Jan 2006 01:16:27 -0800, "Igor"
>> >> <Igor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>> >>
>> >> >Hello,
>> >> >
>> >> >We have successfully installed WMS on machine. We are running PLESK on same
>> >> >machine with WMS, but problem is that we cannot access to WMS stream from
>> >> >outside with mms:// or http:// protocol. Control protocols (http,mms,rtsp)
>> >> >are enabled. WMS http port is different then IIS http port. WMS works on http
>> >> >port 8000.
>> >> >
>> >> >We have multiple Ips and vhosts on that machine. Locally everything works
>> >> >perfect , but from outside ( as mentioned before ) nothing works as it
>> >> >should, and we do not have any firewall.
>> >>
>> >> ______________^^^ Are you *sure* about that ???
>> >>
>> >> Windows Server 2003 release 2 comes with the windows firewall switched
>> >> on by default, and WMS is not enabled to traverse that until you
>> >> specifically enable it. This is a perfectly reasonable security
>> >> measure to keep the box locked down until a server role is configured
>> >> and access permissions are set to your satisfaction.
>> >>
>> >> If in doubt, so to the firewall and the easiest way is to add
>> >> wmservices.exe to the exceptions list, as stated in this document
>> >> http://www.microsoft.com/windows/windowsmedia/serve/firewall.aspx#WindowsFirewall
>> >>
>> >> HTH
>> >> Cheers - Neil
>> >>
>>
.

Relevant Pages

  • Re: Interesting webserver intrusion (apache 1.3.31, mod_ssl 2.8.18, php 4.3.7)
    ... > fairly tight(only allowing 4 ports in), but perhaps I could tighten it ... The host systems firewall rules govern the access to the jailed system. ... What connections does your server need to ... Perhaps there is a 0-day for your ftp server out there. ...
    (Incidents)
  • Re: Add 2nd NIC after intial install?
    ... My biggest question with 1 NIC is: even if workstations are protected with individual firewall products, what is protecting the SBS server itself if ports are open for remote access through the Linksys firewall? ...
    (microsoft.public.windows.server.sbs)
  • Re: Source Code to Filter out WindowsMessenger POP-UPS
    ... Zone Alarm does NOT support 'server'. ... Very few ports are open, ... >What you are asking for amounts to a firewall. ... I would NOT search for source code to compile ...
    (microsoft.public.inetserver.iis.security)
  • Re: Using Office Outlook with exchange server behind windows firewall
    ... On our network I have windows firewall turned on, on both my small business server and my windows xp workstations. ... Based on an article I read about all the ports that exhange may use I also tried making exceptions for ports ...
    (microsoft.public.windows.server.sbs)
  • Re: NETFW.INF, Preconfigured Firewall settings and dialogs
    ... it is Windows Server 2003 SP1 firewall that i'm using. ... Using the document '832017 Port Requirements for the Microsoft Windows ... > to achieve the following goal: some ports are open by default and others ...
    (microsoft.public.windows.server.networking)