Ephemeral ports in Windows2000 (a way to fix the port for ..

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:%23opem8CaEHA.3476@tk2msftngp13.phx.gbl,
Roy Valenciano <royvalenciano@hotmail.com> asked for help and I offered my
suggestions below:
> Does anybody know how to fix the ports used for W2K when it queries
> root DNS servers ?
>
> We want to protect a DNS server throu ACLs, the problem is: according
> to the Technet, W2K uses ephemeral ports (1024..5000) for such
> queries, which means all that port range has to be open on the ACL,
> in order to permit the entrance of the returning traffic throu the
> Router. We want that the DNS server uses only a fixed port, let's say
> UDP 53, as it did on NT 4.
>
> Thank you.

I hate those emperial ports. You can force it thru the reg. Read up on it:

SendPort for DNS (is what you need to know about):
http://www.microsoft.com/windows20 [...] /95408.asp

Read up on this. In part 3 there's info about the SendOnNonDnsPort.
Some more info on reg entries for DNS:
198410 - Microsoft DNS Server Registry Parameters, Part 3 of 3:
http://support.microsoft.com/?id=198410
198409 - Microsoft DNS Server Registry Parameters, Part 2 of 3:
http://support.microsoft.com/?id=198409
198408 - Microsoft DNS Server Registry Parameters, Part 1 of 3:
http://support.microsoft.com/?id=198408

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Active Directory

HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================