Re: unable to join domain from dmz

Check out the following articles on the Microsoft website that outline all the 
protocols required.

http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/w2kstart.mspx

http://search.microsoft.com/search/results.aspx?st=b&View=en-us&s=6&c=0&qu=Windows%202000%20Startup%20and%20Logon%20Traffic%20Analysis

-shane
--
Shane B. Milburn                           Email: milburn@panix.com
Sr Security & Network Engineer             GPG Key ID: 9DA907DA


On Mon, 23 Aug 2004, Bilal Dar wrote:

> I am having a problem, i couldn't figure out the reason till now. We are
> having our NT 4 Primary Domain Controller on the inside network, now i am
> installing another server in the DMZ as a Backup Domain Controller. When i
> try to join the domain during installation i get an error stating "The
> domain controller for the domain cannot be located"
>
> Dmz = 172.17.0.0/16
> Inside = 172.16.0.0/16
>
> PDC = 172.16.4.2
> NewServer = 172.17.0.10/16
>
> conduit permit icmp any any
> conduit permit ip host 172.17.0.10 172.16.0.0 255.255.0.0
> conduit permit ip host 172.17.0.10 172.17.0.0 255.255.0.0
> conduit permit tcp host 172.17.0.10 eq smtp any
> conduit permit tcp host 172.17.0.10 eq pop3 any
> conduit permit tcp host 172.17.0.10 eq domain any
> conduit permit udp host 172.17.0.10 eq domain any
> conduit permit ip host 172.17.4.2 host 172.17.0.10
>
>
> I can ping NewServer from Inside network. Am i missing something?
>
>
> Thanks