No subject

kerberos           88/tcp    krb5 kerberos-sec      #Kerberos
kerberos           88/ucp    krb5 kerberos-sec      #Kerberos
microsoft-ds      445/tcp
microsoft-ds      445/udp


The traffic on port 88 stopped, after a while.  It's been a week since
joining the Windows 2000 servers to the domain, and they're still trying to
chat on port 445.  I've got that port blocked at the server (via ipchains);
even if it wasn't blocked the Linux server isn't running anything that
listens on that port.  The Windows 2000 servers are functioning just fine,
so clearly the microsoft-ds service isn't crucial.

I'm assuming it's a part of the Active Directory services; but I'm curious
why it's activated.  I thought that Windows 2000 would see the Samba 2.2
server as a Windows NT 4.0 domain controller, and thus operate in Legacy
mode (ie: no Active Directory).  Is this not the case?

Cheers,
Scott


-----Original Message-----
Date: Wed, 7 Mar 2001 18:34:56 +0100 (CET)
From: Simo Sorce <simo.sorce at polimi.it>
To: "MCCALL,DON (HP-USA,ex1)" <don_mccall at hp.com>
Cc: "'Robert M. Martel'" <bob at meeker.urban.csuohio.edu>,
	<samba-ntdom at us5.samba.org>
Subject: RE: ports used by samba in PDC role


Exactly (from /etc/services)
netbios-ns	137/tcp				# NETBIOS Name Service
netbios-ns	137/udp
netbios-dgm	138/tcp				# NETBIOS Datagram Service
netbios-dgm	138/udp
netbios-ssn	139/tcp				# NETBIOS session service
netbios-ssn	139/udp

if you have win2k you may also need port, hmmm 445?

On Wed, 7 Mar 2001, MCCALL,DON (HP-USA,ex1) wrote:

> Robert,
> smbd and nmbd use ports 137,138, and 139.
> If you use swat as well, it is normally configured to use port 901.
> Hope this helps,
> Don
>
> -----Original Message-----
> From: Robert M. Martel [mailto:bob at meeker.urban.csuohio.edu]
> Sent: Wednesday, March 07, 2001 9:24 AM
> To: samba-ntdom at us5.samba.org
> Subject: ports used by samba in PDC role
>
>
> 	Greetings all,
>
> 	Quick question.  I need to be able to access my SAMBA PDC and shares
>
> from a different subnet passing through a firewall.  We had the different
> subnet
> bit working okay until a firewall was placed in between.  Can someone tell
> me
> which ports we need to ask our university  computer staff to open up for
us
> on
> the firewall in order to access the SAMBA domain and shares again?
>
> 	To the development group: "Great Job!"
>
> 	Thanks,
> 	-Bob Martel