DC、Exchange、SMS防火墙开放端口问题|活动目录exchangesms端口列表。在内网和DMZ区都有DC、Exchange 2007、SMS服务器,我想问一下需要在防火墙上分别开放那些端口
回答:根据您的描述,我对您提出的问题的理解是:您想知道DC、Exchange、SMS分别需要在防火墙开放哪些端口。如果我的理解有误,请您告诉我。

SMS的端口需求如下:
826852:Ports that Systems Management Server 2003 uses to communicate through a firewall or through a proxy server
http://support.microsoft.com/kb/826852/en-us

Domain Controller的端口需求:
RPC endpoint mapper 135/tcp, 135/udp
RPC static port for Active Directory replication See Appendix D
Kerberos 88/tcp, 88/udp
LDAP 389/tcp
LDAP over SSL 636/tcp
Global Catalog LDAP 3268/tcp
Global Catalog LDAP over SSL 3269/tcp
SMB over IP (Microsoft-DS) 445/tcp, 445/udp
DNS 53/tcp, 53/udp
Network Time Protocol (NTP) 123/udp

更多的DC端口需求,请参考下面的文档:
Active Directory in Networks Segmented by Firewalls
http://www.microsoft.com/downloads/details.aspx?familyid=C2EF3846-43F0-4CAF-9767-A9166368434E&displaylang=en

Exchange的端口需求:
Ports Used in Exchange Server 2003
http://technet.microsoft.com/en-us/library/bb124075.aspx

更多Windows Server产品所需要的网络端口,您也能参考下面的这篇微软文档:
832017:Service overview and network port requirements for the Windows Server system
http://support.microsoft.com/kb/832017/en-us