There are several KB articles on limiting RPC and DCOM ports, but the KB site search function still seems to be locked out. Try there once in awhile and search for "RPC and Exchange". Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Peter Phelan" <peter.phelan@xxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, October 01, 2001 08:57 Subject: [isalist] Re: IIS MMC to DMZ http://www.ISAserver.org Hi Jim I would only require MMC access to the IIS server in the DMZ from the internal network. In this instance the hole is just on the internal firewall. Surely this is not such a monster hole? and in this case would I be required to open a range of ports ?? Thanks Peter -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 01 October 2001 16:02 To: [ISAserver.org Discussion List] Subject: [isalist] Re: IIS MMC to DMZ http://www.ISAserver.org the IIS MMC app uses RPC to talk to the IIS metabase and IIS services. That's a monster hole in your firewall; private IP's or not. Use Terminal service in high encryption mode; you'll be glad you did. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Peter" <peter.phelan@xxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, October 01, 2001 7:18 AM Subject: [isalist] IIS MMC to DMZ http://www.ISAserver.org What rules are required to access my Web server with MMC for IIS. The web server is on the DMZ which has a private address range ?? thanks Peter ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: peter.phelan@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')