Ports required for Outlook

[nsantin]

Hi, I need to provide Outlook access to our exchange server and DC/GC servers across one of our VLANS that currently has no access to these servers. I was previously using RPC/HTTPS but im having stability issues, so until that is sorted I'm going to use good ole direct TCP/IP connections to the server(s).

Other then 25, what ports do I need to open for this to work? I see outlook connects to the directory, is that just using LDAP (3389) or is there more required?

I'm pretty sure I saw this answered previously in this forum, but "search" is still not working.

thank

 

[58sniper]

Are you actually blocking any ports in your VLAN routing? Typically, in a situation like that, you should be able to connect with just MAPI and go from there. Even RPC over HTTPS would be overkill (assumptions being made, of course). Can you break down some things a little more, and maybe we can help get it going for you.

Pat Richard
Microsoft Exchange MVP

 

[nsantin]

Correct. My current config blocks all traffic between the 2 vlans in question, except web & dns. Currently users on that vlan connect via RPC (they are not active on our network nor are they part of our domain, but they have exchange mailboxes).

Im going to allow direct access, but I only want to open the required ports that Outlook needs to connect to exchange and the DCs. When I run RPCDIAG on my side, I can see outlook connecting to the DCs for "Directory" and the E2K3 server for "Mail" and "Public Folders"

My root problem is RPC stability:

http://www.tek-tips.com/viewthread.cfm?qid=1421625

This setup has worked fine for the past 2 years and now is starting to act up.

 

[markdmac]

LDAP uses 389, not 3389 which is for RDP.

Port 25 is just for SMTP traffic. Ports 80 and 443 are used for Outlook over http.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[nsantin]

I opened all ports to my E2K3 and DC/GC servers and was able to connect, however the active ports in use that I saw were:

1121
1142
135
143
88

I'll leave it as is for now and play with it when I get more time (aka - never)