Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Server for NIS and firewall?

56 views
Skip to first unread message

Brian

unread,
Sep 4, 2009, 12:00:01 PM9/4/09
to
I have installed Server for NIS on a Windows 2003 R2 system which a
domain controller in our 2003 domain (the primary DC is 2003, but NOT
R2). I am also using the Windows Firewall. I cannot access this NIS
server from Linux clients with the firewall enabled, but can with the
firewall disabled (i.e. using ypcat).

What configuration needs to be done to the firewall to allow this
traffic through? Can the YPSERV ports be locked down or limitted so
we can pass them through the firewall? Or does this only work without
Windows Firewall?

Thanks!

Ashish

unread,
Sep 16, 2009, 1:05:38 PM9/16/09
to
Are you using Windows Firewall on this box? Although, the NIS ports
will be changed every time the service is restarted, those ports can
be opened in Windows Firewall using the following batch file -

<snip>
@ECHO OFF

Echo Checking the current Firewall rules for NIS ports and deleting
them...
FOR /F "tokens=1,2" %%P in ( ' NETSH Firewall Show PortOpening ^|
FindStr NIS ' ) do @NETSH Firewall DELETE PortOpening %%Q %%P

Echo Scanning the ports used by NIS Service now and then adding them
to Firewall rules
FOR /F "tokens=3,4" %%A in ( 'RPCINFO -P ^| FindStr "ypserv
yppasswdd"' ) do @NETSH Firewall ADD PortOpening %%A %%B NIS Enable
All

Echo Current Firewall Rules
Echo
-------------------------------------------------------------------
NETSH Firewall SHOW PortOpening
</snip>

You will have to copy and expand the rpcinfo command from either SFU
installation or R2 media in the same directiry as this batch file to
get this to work.

- Ashish

0 new messages