Re: Missing ForestDNSZones and DomainDNSZones partitions under child AD 2003 domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

"rchipman" <rchipman.3x30bb@xxxxxxxxxxxxx> wrote in message news:rchipman.3x30bb@xxxxxxxxxxxxxxxx

I haven't heard from you in awhile. Apparently from the results you've posted, there's a block going on with the firewalls and/or VPN, or the local machines. Did you say you checked the firewalls and VPN filters to insure they allow 'any - any" between all locations? And also, there is no local firewall installed or some other security or antivirus app installed that could be blocking the traffic? Possibly an IPSec rule somewhere either locally or in a GPO?

Ace




Hello -

It's been awhile and my problem still exists.

I am finally getting a chance to utilize the portqry tool and thought I
would post some results in an effort to get some understanding of what
I'm actually seeing.

I ran the command "portqry -n myserver -p udp -e 137 on 4 servers: the
PAW2 server (the one with all DNS zones listed), PAWDC (the DC and DNS
server w/o all zones listed) and two others DCs in two of my other
domains. On the PAWDC DC and the other DCs, I received the below
results:

C:\PortQryV2>portqry -n pawdc -p udp -e 137

Querying target system called:

pawdc

Attempting to resolve name to IP address...


Name resolved to 10.250.16.15

querying...

UDP port 137 (netbios-ns service): LISTENING or FILTERED

Using ephemeral source port
Attempting NETBIOS adapter status query to UDP port 137...

Server's response: MAC address 005056b122e5
UDP port: LISTENING

However, on the PAW2 server, I received the following:

D:\PortQryV2>portqry -n paw2 -p udp -e 137

Querying target system called:

paw2

Attempting to resolve name to IP address...


Name resolved to 10.250.16.12

querying...

UDP port 137 (netbios-ns service): LISTENING or FILTERED

I'm guessing this is a problem since it didn't return this
information..?:

Using ephemeral source port
Attempting NETBIOS adapter status query to UDP port 137...

Server's response: MAC address 005056b122e5
UDP port: LISTENING

Also, on the same servers I tested port 135 and all of them but PAW2
indicated port 135 was not listening. On PAW2, I received the
following:

querying...

UDP port 135 (epmap service): LISTENING or FILTERED

Using ephemeral source port
Querying Endpoint Mapper Database...
Server's response:

UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 DHCP Client LRPC Endpoint
ncalrpc:[dhcpcsvc]

UUID: 50abc2a4-574d-40b3-9d66-ee4fd5fba076
ncacn_ip_tcp:14.0.0.0[3690]

UUID: 906b0ce0-c70b-1067-b317-00dd010662da
ncalrpc:[LRPC00000d00.00000001]

UUID: 906b0ce0-c70b-1067-b317-00dd010662da
ncalrpc:[LRPC00000d00.00000001]

UUID: 906b0ce0-c70b-1067-b317-00dd010662da
ncalrpc:[LRPC00000d00.00000001]

UUID: 906b0ce0-c70b-1067-b317-00dd010662da
ncalrpc:[LRPC00000d00.00000001]

UUID: 6bffd098-a112-3610-9833-46c3f874532d
ncalrpc:[OLEBC01E54B075D47EB9333D7DD355A]

UUID: 6bffd098-a112-3610-9833-46c3f874532d
ncacn_ip_tcp:14.0.0.0[1058]

UUID: 6bffd098-a112-3610-9833-46c3f874532d
ncalrpc:[DHCPSERVERLPC]

UUID: 5b821720-f63b-11d0-aad2-00c04fc324db
ncalrpc:[OLEBC01E54B075D47EB9333D7DD355A]

UUID: 5b821720-f63b-11d0-aad2-00c04fc324db
ncacn_ip_tcp:14.0.0.0[1058]

UUID: 5b821720-f63b-11d0-aad2-00c04fc324db
ncalrpc:[DHCPSERVERLPC]

UUID: f5cc59b4-4264-101a-8c59-08002b2f8426 NtFrs Service
ncalrpc:[OLEFE2DFC3F337F4EEDAF282AFC0948]

UUID: f5cc59b4-4264-101a-8c59-08002b2f8426 NtFrs Service
ncacn_ip_tcp:14.0.0.0[1043]

UUID: f5cc59b4-4264-101a-8c59-08002b2f8426 NtFrs Service
ncalrpc:[LRPC000006a4.00000001]

UUID: d049b186-814f-11d1-9a3c-00c04fc9b232 NtFrs API
ncalrpc:[OLEFE2DFC3F337F4EEDAF282AFC0948]

UUID: d049b186-814f-11d1-9a3c-00c04fc9b232 NtFrs API
ncacn_ip_tcp:14.0.0.0[1043]

UUID: d049b186-814f-11d1-9a3c-00c04fc9b232 NtFrs API
ncalrpc:[LRPC000006a4.00000001]

UUID: a00c021c-2be2-11d2-b678-0000f87a8f8e PERFMON SERVICE
ncalrpc:[OLEFE2DFC3F337F4EEDAF282AFC0948]

UUID: a00c021c-2be2-11d2-b678-0000f87a8f8e PERFMON SERVICE
ncacn_ip_tcp:14.0.0.0[1043]

UUID: a00c021c-2be2-11d2-b678-0000f87a8f8e PERFMON SERVICE
ncalrpc:[LRPC000006a4.00000001]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncalrpc:[audit]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncalrpc:[securityevent]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncalrpc:[protected_storage]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncalrpc:[dsrole]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncacn_ip_tcp:14.0.0.0[1025]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncalrpc:[NTDS_LPC]

UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 MS NT Directory DRS
Interface
ncacn_http:14.0.0.0[1028]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncalrpc:[audit]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncalrpc:[securityevent]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncalrpc:[protected_storage]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncalrpc:[dsrole]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncacn_ip_tcp:14.0.0.0[1025]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncalrpc:[NTDS_LPC]

UUID: 12345778-1234-abcd-ef00-0123456789ab
ncacn_http:14.0.0.0[1028]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncalrpc:[audit]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncalrpc:[securityevent]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncalrpc:[protected_storage]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncalrpc:[dsrole]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncacn_ip_tcp:14.0.0.0[1025]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncalrpc:[NTDS_LPC]

UUID: 12345778-1234-abcd-ef00-0123456789ac
ncacn_http:14.0.0.0[1028]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncalrpc:[audit]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncalrpc:[securityevent]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncalrpc:[protected_storage]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncalrpc:[dsrole]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncacn_ip_tcp:14.0.0.0[1025]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncalrpc:[NTDS_LPC]

UUID: ecec0d70-a603-11d0-96b1-00a0c91ece30 NTDS Backup Interface
ncacn_http:14.0.0.0[1028]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncalrpc:[audit]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncalrpc:[securityevent]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncalrpc:[protected_storage]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncalrpc:[dsrole]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncacn_ip_tcp:14.0.0.0[1025]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncalrpc:[NTDS_LPC]

UUID: 16e0cf3a-a604-11d0-96b1-00a0c91ece30 NTDS Restore Interface
ncacn_http:14.0.0.0[1028]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncalrpc:[audit]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncalrpc:[securityevent]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncalrpc:[protected_storage]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncalrpc:[dsrole]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncacn_ip_tcp:14.0.0.0[1025]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncalrpc:[NTDS_LPC]

UUID: 12345678-1234-abcd-ef00-01234567cffb
ncacn_http:14.0.0.0[1028]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncacn_np:\\\\PAW2[\\PIPE\\lsass]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncalrpc:[audit]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncalrpc:[securityevent]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncalrpc:[protected_storage]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncacn_np:\\\\PAW2[\\PIPE\\protected_storage]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncalrpc:[dsrole]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncacn_ip_tcp:14.0.0.0[1025]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncalrpc:[NTDS_LPC]

UUID: 12345678-1234-abcd-ef00-0123456789ab IPSec Policy agent endpoint
ncacn_http:14.0.0.0[1028]

UUID: 1ff70682-0a51-30e8-076d-740be8cee98b
ncalrpc:[wzcsvc]

UUID: 1ff70682-0a51-30e8-076d-740be8cee98b
ncalrpc:[OLE157288FA559C4D5AAB2F884A388C]

UUID: 1ff70682-0a51-30e8-076d-740be8cee98b
ncacn_np:\\\\PAW2[\\PIPE\\atsvc]

UUID: 378e52b0-c0a9-11cf-822d-00aa0051e40f
ncalrpc:[wzcsvc]

UUID: 378e52b0-c0a9-11cf-822d-00aa0051e40f
ncalrpc:[OLE157288FA559C4D5AAB2F884A388C]

UUID: 378e52b0-c0a9-11cf-822d-00aa0051e40f
ncacn_np:\\\\PAW2[\\PIPE\\atsvc]

UUID: 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
ncalrpc:[wzcsvc]

UUID: 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
ncalrpc:[OLE157288FA559C4D5AAB2F884A388C]

UUID: 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53
ncacn_np:\\\\PAW2[\\PIPE\\atsvc]

UUID: 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 DHCP Client LRPC Endpoint
ncalrpc:[DNSResolver]

Total endpoints found: 94



==== End of RPC Endpoint Mapper query response ====

UDP port 135 is LISTENING


D:\PortQryV2>

I'm wondering why port 135 is open on PAW2 but no the other servers.
Since the other DCS in the other domains are working, I'm guessing it
doesn't need to be....?


--
rchipman
------------------------------------------------------------------------
rchipman's Profile: http://forums.techarena.in/members/116985.htm
View this thread: http://forums.techarena.in/server-dns/503672.htm

http://forums.techarena.in



.

Relevant Pages

  • Re: 4.8 and NIS enabled client spawning listening UDP ports per process
    ... >> that either logs in or changes running as user a Listening UDP port ... The problem is these UDP ports are listening ports ... This is how NIS client access works. ... UDP socket which is used for the lifetime of the process to talk to the ...
    (freebsd-questions)
  • Re: Missing ForestDNSZones and DomainDNSZones partitions under child AD 2003 domain
    ... PAW2: UDP port 137: LISTENING or FILTERED ... Other DCs: UDP port 137 (netbios-ns service): LISTENING or FILTERED ...
    (microsoft.public.windows.server.dns)
  • Re: Fwd: Re: NetBSD GPS/PPS using 4.2.6p3
    ... server 127.127.20.1 mode 17 ... tosch:/tmp # tail -f gpsplug.log ... Listening on udp port: 26337 ...
    (comp.protocols.time.ntp)
  • Odd Windows Explorer behaviour
    ... known services that use this udp port, ... A log off and back on stops explorer listening, ... the machine using mcafees personal firewall & captured all packets with ... ethereal but nothing seems to show up as communicating over that udp port. ...
    (microsoft.public.win2000.security)
  • Re: in need of UDP extension
    ... Only one application be be listening on a give UDP port on a given machine at any one time. ... of Tcl; in fact, it has nothing to do with Tcl. ... I quite happily run multiple scripts/applications using tcludp ...
    (comp.lang.tcl)