PIX DMZ Domain Member Ports Question

[dave2korg]

Okay, at this point I'm a bit frazzled. I have a NAS and 2003 R2 server both residing in my DMZ behind a PIX 515E. The NAS and R2 server have been setup with the following in the firewall:

Inside (outgoing) NAS -> DomainServers (TCP)
Inside (outgoing) NAS -> DomainServers (UDP)
Inside (outgoing) NAS -> R2 Server (TCP)
Inside (outgoing) NAS -> R2 Server (UDP)

then

DMZ Interface (Incoming) NAS -> DomainServers (TCP
DMZ Interface (Incoming) NAS -> DomainServers (UDP)
DMZ Interface (Incoming) R2 Server -> DomainServers (TCP)
DMZ Interface (Incoming) R2 Server -> DomainServers (UDP)

The TCP Ports im using in the above reference are: 1024-1028, 135, 139, 3268, 3269, 389, 445, 5100-5400, 53, 636, 88

The UDP Ports im using in the above reference are: 389, 5100-5400, 53, and 88

The NAS can be added to the domain, and talk to anything in the domain, however the R2 Server cannot. Anyone have a suggestion?

David McKissic
A+, Net+, i-net+, CCNA, CNE, CNA

 

[Supergrrover]

These are a list of MS ports.

http://www.microsoft.com/smallbusiness/support/articles/ref_net_ports_ms_prod.mspx

Can you post a config?


Brent
Systems Engineer / Consultant
CCNP, CCSP