What are Intranet & Internet ports ??

[PJamesD]

I'm in the process of planning how we are going to use the RPC configuration tool to lock down which ports RPC uses. The RPC configuration tool refers to "internet ports" and "intranet ports" - yet there's no definition, and I can't find one from searching either. Nor do my colleagues know!

Anyone shed any light please?
Cheers
P

 

[cpjust]

A port can be any number from 1 to 65535.
There are certain 'common' ports used on the Internet such as:
HTTP: 80
FTP: 21
Telnet: 23
SMTP: 25
POP3: 110
DNS: 53

Here's a list of all the registered port numbers:

http://www.iana.org/assignments/port-numbers

 

[PJamesD]

Cheers - nice link that one.

I understand commonly used ports etc. But I do not know what is meant by "internet ports" and "intranet ports". This is an example of the RPC documentation I am refering to.

I am about to specific which ports I want RPC to use, - but I don't konw whether to specify a internet or intranet registry key. The traffic will only be used within a private network, - so does that mean I'll specify intranet ports?


RpcCfg Remarks
Configuring RPC Registry Settings
RPC stores its configuration data under the registry entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Internet. In this registry location the following keys are used to configure the ports on which RPC listens:

UseInternetPorts
PortsInternetAvailable
Note

These registry keys do not appear unless you change the default value for the computer.

You can manipulate the default ports setting, as follows, with the /d parameter:

Use /d 0 to set UseInternetPort to Y.
Use /d 1 to set UseInternetPort to N.
Users can manipulate the Internet/intranet port settings with the PortsInternetAvailable registry key /pi and /pe parameters as follows:

Use /pi to set a specific port or range of ports to be stored as intranet available.
Use /pe to set a specific port or range of ports to be stored as Internet available.
The valid values for the PortsInternetAvailable registry key are Y or N.

 

[karlisi]

How to configure RPC dynamic port allocation to work with firewalls

http://support.microsoft.com/default.aspx/kb/154596

Using Distributed COM with Firewalls

http://msdn2.microsoft.com/en-us/library/ms809327.aspx

So, Internet ports are ports, which you need to open on network firewall to allow RPC traffic to/from Internet. If all traffic will be local, you don't need open some ports and I don't understand why to configure these settings.

===
Karlis
ECDL; MCSA