3

We have a web server (IIS) and a database server (MS SQL 2005) separated by an application proxy / firewall. We want to keep the number of open ports between the two machines at a minimum. Obviously port 1433 (or equivalent) is needed, however, we also need to support MSDTC transactions. The MS advice here suggests port 135 and a range of other ports.

However, there is no guidance regarding the number of ports to keep open. Is one enough? Do I need ten? What determines the number of ports we need open.

Any pointers appreciated!

Peter K.
  • 80
  • 5
  • 17

1 Answers1

4

Here are 2 KB articles that both recommend 15-20 ports being opened in the 5000 range. Here is another article that recommends a minimum of 100 ports because other applications that use RPC dynamic port allocation will use the ports as well. A similar question was asked on stack overflow and it looks like that person accepted the minimum 100 answer.

MattB
  • 11,124
  • 1
  • 29
  • 36