Configuring Windows Functionality Through A Firewall/NAT

You are here:
< Back
Configuring Windows Functionality Through A Firewall/NAT
Last Updated: 18 Jul 2004
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***


The following documents provide instructions for enabling
connectivity of a single domain across firewalls or
routers, and enabling VPN traffic across a firewall or
router:


DOMAIN TRUSTS

• http://support.microsoft.com/?KBID=179442http://support.microsoft.com/?KBID=150543http://support.microsoft.com/?KBID=303503


VPN TRAFFIC

• http://www.microsoft.com/windowsserver2003/technologies/networking/vpn/http://www.microsoft.com/windows2000/technologies/communications/vpn/http://www.microsoft.com/windowsxp/home/using/productdoc/en/access_pptp.asphttp://www.microsoft.com/ntserver/techresources/commnet/RRAS/RRAS_FAQ.asphttp://www.microsoft.com/ntserver/ProductInfo/faqs/PPTPfaq.asphttp://support.microsoft.com/?KBID=283628http://support.microsoft.com/?KBID=241251http://support.microsoft.com/?KBID=162847http://support.microsoft.com/?KBID=255784http://support.microsoft.com/?KBID=169890


COMMON WINDOWS PORTS

• NetBIOS ................ TCP 135, 137-139
          ................ UDP 135, 137-139

• SMB .................... TCP 445

• PPTP ................... TCP 1723
       ................... IP Protocol 47 (GRE)

• MSN Messneger
      Audio & Video ...... UDP 5004 - 65535
      App Sharing ........ TCP 1503
      File Transfer ...... TCP 6891 - 6900
      Whiteboard ......... TCP 1503
      SIP Signaling ...... TCP 5060
      RDP/Remote Asst .... TCP 3389

• UPnP ................... UDP 1900


USING MSN/WINDOWS MESSENGER THROUGH A FIREWALL

• http://www.microsoft.com/windowsxp/pro/techinfo/deployment/natfw/http://www.microsoft.com/windowsxp/pro/techinfo/administration/adminra/http://www.jsiinc.com/SUBK/tip5400/rh5484.htmhttp://messenger.msn.com/support/knownissues.asphttp://www.nc-india.com/workshop/stories/33078.htmlhttp://asia.cnet.com/itmanager/tech/0,39006407,39092525,00.htmhttp://www.microsoft.com/windowsxp/expertzone/columns/bowman/december24.asphttp://www.chebucto.ns.ca/~rakerman/port-table.html#WinMesshttp://www.smallnetbuilder.com/FAQ-9-General-8.phphttp://www.practicallynetworked.com/sharing/app_port_list.htm


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ADDITIONAL SEARCH OPTIONS (MS KB)

• http://msdn.microsoft.com/http://www.microsoft.com/technet/http://www.microsoft.com/

  ALL WORDS .............. "GRE"
  ALL WORDS .............. "PPTP"
  ALL WORDS .............. "VPN Firewall"
  ALL WORDS .............. "Messenger Firewall"
  ALL WORDS .............. "uPNP"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


PERSONAL NOTES

• For PPTP to work, you must allow the following:
	TCP 1723 (or IP Protocol 6, port 1723)
	GRE      (or IP Protocol 47)

• Many broadband routers have direct support for PPTP
  through their built-in firewalls.

• Many MSN Messenger functions require non-NAT access
  between hosts.  If NAT is used on both ends of the
  connection, then UPnP is also required with at least
  one connection, for full functionality.